R_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = msgget(0x0, 0x5) msgrcv(r2, &(0x7f0000000800)={0x0, ""/135}, 0x8f, 0x0, 0x3000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000c40)={&(0x7f0000000900), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x400}, @ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000090) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r3) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x44, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xa}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x25, 0xbe, "7b662e19483e2316ec2be6effba4ae0ed04dd9710550af2ac91605a7365b4602f0"}]}, 0x44}, 0x1, 0x0, 0x0, 0xc841}, 0x24000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:06:36 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1898}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x400}, 0x41) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3e8, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9844f58}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "03045c59874af1cf4497b82851f3f663ae921df650"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "e25a4b9c51caadf1baa337d62d7fa023a55ab64f4d36a9af55eeeab814caf44e844f5a345338522ed17feb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x161f}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3c170325225d6b855b9de7176ba3677bc687df5a49d3e75cbfe9"}}, @TIPC_NLA_NODE_ID={0x28, 0x3, "ecd9415419e82213541d1d971e8c949be964f7fcd3dbcf7d29ddf664a5d429b15a287cc3"}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4dd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd492}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "645687102b0cc70bd941c8abb94128ce5de6f1b9a360bb9323e94db7d3e90c36cd44d1319665d8eec240e7b8686c955b32c758d0c976986af2681ad2c1a5150574398c75fe517955c3db013ada4f3ad740904eeba162d9c9eb82bdd5c648ec1b8cbc4a4d79d5995405040987d7d4e51f6a486e571ac1a1737a28f316d4ec2c10708738e55ed38fcf1d30b38f183ecfdbebeea14455b0e414ca453a30aafc0fcfda2ea6c71b972a988bbe50970be75b55e512aab0c0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5c6cda21f5e204553f4203220f8dc617a16ee2b809655edc3e3455842ed3"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a0963d58f57e902a74c488824ee8a8f17ec3b7334499be5b9c8e1e3c6dbd5f000291"}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x553}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x56}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1d0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1c, 0xfa, "12b18b308babfcd5149f2b67f296e2685ca60cdc00ebbc56"}, @NL80211_ATTR_FILS_ERP_RRK={0xbb, 0xfc, "ce0878d53f26012cc01acfe145b41b0a0ec4136e9e9c366abc1163819fecd8ab0b016d1fae725fdd3bbcc43f8cd5b0560d794f7335fb788e9937827a9a42fdc4d73c10e2d83fc3f471893bf753cf6ca6caa20535e44c2e4f023b130ced13e94ff579432051f6e6875e23b39b2b87b029122eef81a290d7d600950db9270e296dc2dc6f57d6fe97b1e768b96db63ca09168137743f5afdcefa26c9d4733b366e54f20eaa1a4a64f292e831092e66994210f9810996f5005"}], @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4, 0x40}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1f}]}, @NL80211_ATTR_IE={0xad, 0x2a, [@ibss={0x6, 0x2, 0x3}, @fast_bss_trans={0x37, 0xa3, {0x7, 0x3, "6bf1646a2efc2e15363c1fac649395b4", "72d72c3283b7c02a69417eafe0821e8e2237aabb7e605b0e1fdeecbab305c6d6", "a96c90116f81439e8abf6f5787f4a75e34e2ec8715c241e80df9ec1da53524f3", [{0x1, 0x27, "0ff66f3f396684de13e44d6f865fffc490aa97d4dcbe39f3ffc7b6948bcadb1630319dc44fed63"}, {0x2, 0xd, "ed97795d8c68e4785dad9c27b1"}, {0x3, 0x17, "afabb91af22ab3619844fe1cffa8b78934d830d38cdc36"}]}}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20010}, 0x48010) r4 = fsmount(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x98, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "93efaac98bfdcd70382505cd6590f662"}, @NL80211_ATTR_PMK={0x14, 0xfe, "61172606e7667c3388e064b4616387ea"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "a692ce4f7e83d72b876dad92a6a9f677"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "606ce43f1df7b2177afe328b9d67ea98"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e924e613c43d766db9807efac5d63d51"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1024}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x10) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x1010, r4, 0x8000000) 15:06:36 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002880)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x30, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x40) openat$autofs(0xffffffffffffff9c, &(0x7f00000029c0), 0x113002, 0x0) syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a40)={0x118, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3f}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x483}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xac}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd3, 0xac, "e765b1b5584ae590a75bdbb4b60a1e94e511496de684d56c862e1c3825a8e06c5a75cbd341e29cffc79045b33418ceba7a9f59cd1c630b698f584af8285cf9ca262c66893c1e51aadcf6fee5f4965769c76df9476330c63570a0e0fe3226804171e535df275d94e248cd4f9fc4ede45db3afdba6ff6cb8682d9a3aab00d16d9247ec77bed5b4fb31495819a1e322422fb16132329ed75d95fcc628b2445d430f10a87238c6a6a787548c5e1897307d791c2c58abc6a7e047c88e45b9b1156f600aa90b6f0887acc9abfaeb80654c02"}]}, 0x118}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) fadvise64(0xffffffffffffffff, 0x8001, 0x9, 0x4) sendmsg$TIPC_NL_LINK_GET(r6, &(0x7f0000002d80)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002c40)={0xcc, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x9c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x40}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xab}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x80, @empty, 0x5}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x24001880}, 0x48840) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r2) 15:06:36 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r5 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x94, r6, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x800, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x20000011) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x81) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r5) 15:06:36 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = msgget(0x0, 0x5) msgrcv(r2, &(0x7f0000000800)={0x0, ""/135}, 0x8f, 0x0, 0x3000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000c40)={&(0x7f0000000900), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x400}, @ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:06:36 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002880)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x30, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x40) openat$autofs(0xffffffffffffff9c, &(0x7f00000029c0), 0x113002, 0x0) syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a40)={0x118, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3f}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x483}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xac}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd3, 0xac, "e765b1b5584ae590a75bdbb4b60a1e94e511496de684d56c862e1c3825a8e06c5a75cbd341e29cffc79045b33418ceba7a9f59cd1c630b698f584af8285cf9ca262c66893c1e51aadcf6fee5f4965769c76df9476330c63570a0e0fe3226804171e535df275d94e248cd4f9fc4ede45db3afdba6ff6cb8682d9a3aab00d16d9247ec77bed5b4fb31495819a1e322422fb16132329ed75d95fcc628b2445d430f10a87238c6a6a787548c5e1897307d791c2c58abc6a7e047c88e45b9b1156f600aa90b6f0887acc9abfaeb80654c02"}]}, 0x118}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) fadvise64(0xffffffffffffffff, 0x8001, 0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r2) 15:06:36 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, @remote, @private0, 0x7, 0x8, 0xc78, 0x200}}) r8 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r8, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r11) ioctl$RFKILL_IOCTL_NOINPUT(r11, 0x5201) r12 = io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc018937e, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r12, @out_args}, './file0\x00'}) 15:06:44 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r5 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x94, r6, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x800, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x20000011) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r8, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}]}, 0x34}, 0x1, 0x0, 0x0, 0x20}, 0x81) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r5) 15:06:44 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002880)={{0x1, 0x1, 0x18, r6, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r7, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x30, r5, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x40) openat$autofs(0xffffffffffffff9c, &(0x7f00000029c0), 0x113002, 0x0) syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x101}, 0xc, &(0x7f0000002b80)={&(0x7f0000002a40)={0x118, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3f}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x483}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0xac}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_EXT_CAPABILITY={0xd3, 0xac, "e765b1b5584ae590a75bdbb4b60a1e94e511496de684d56c862e1c3825a8e06c5a75cbd341e29cffc79045b33418ceba7a9f59cd1c630b698f584af8285cf9ca262c66893c1e51aadcf6fee5f4965769c76df9476330c63570a0e0fe3226804171e535df275d94e248cd4f9fc4ede45db3afdba6ff6cb8682d9a3aab00d16d9247ec77bed5b4fb31495819a1e322422fb16132329ed75d95fcc628b2445d430f10a87238c6a6a787548c5e1897307d791c2c58abc6a7e047c88e45b9b1156f600aa90b6f0887acc9abfaeb80654c02"}]}, 0x118}, 0x1, 0x0, 0x0, 0x20004010}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r2) 15:06:44 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = memfd_secret(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x1) r7 = socket(0x1d, 0x6, 0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x23}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x20044004) vmsplice(r4, &(0x7f0000001540)=[{&(0x7f0000000500)="f467adc5a8f1715382a06fb25852bdba22e815b822303251af05c7b07fdf7921ac8ec438db25b69bea47d69a04a5", 0x2e}, {&(0x7f0000000540)="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", 0x1000}], 0x2, 0xc) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xab2f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001700)={0x0, @can, @nfc={0x27, 0x1, 0x0, 0x5}, @nfc={0x27, 0x0, 0x0, 0x1}, 0xf428, 0x0, 0x0, 0x0, 0xff06, &(0x7f00000016c0)='ip_vti0\x00', 0x40, 0x6, 0x5}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 15:06:44 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r2, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800) r4 = accept(r3, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000500), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/17, 0x11}, {&(0x7f0000000800)=""/46, 0x2e}], 0x5, &(0x7f00000008c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000a80)={@initdev, @remote}, &(0x7f0000000ac0)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x13380000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:06:44 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1898}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x400}, 0x41) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3e8, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9844f58}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "03045c59874af1cf4497b82851f3f663ae921df650"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "e25a4b9c51caadf1baa337d62d7fa023a55ab64f4d36a9af55eeeab814caf44e844f5a345338522ed17feb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x161f}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3c170325225d6b855b9de7176ba3677bc687df5a49d3e75cbfe9"}}, @TIPC_NLA_NODE_ID={0x28, 0x3, "ecd9415419e82213541d1d971e8c949be964f7fcd3dbcf7d29ddf664a5d429b15a287cc3"}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4dd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd492}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "645687102b0cc70bd941c8abb94128ce5de6f1b9a360bb9323e94db7d3e90c36cd44d1319665d8eec240e7b8686c955b32c758d0c976986af2681ad2c1a5150574398c75fe517955c3db013ada4f3ad740904eeba162d9c9eb82bdd5c648ec1b8cbc4a4d79d5995405040987d7d4e51f6a486e571ac1a1737a28f316d4ec2c10708738e55ed38fcf1d30b38f183ecfdbebeea14455b0e414ca453a30aafc0fcfda2ea6c71b972a988bbe50970be75b55e512aab0c0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5c6cda21f5e204553f4203220f8dc617a16ee2b809655edc3e3455842ed3"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a0963d58f57e902a74c488824ee8a8f17ec3b7334499be5b9c8e1e3c6dbd5f000291"}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x553}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x56}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1d0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1c, 0xfa, "12b18b308babfcd5149f2b67f296e2685ca60cdc00ebbc56"}, @NL80211_ATTR_FILS_ERP_RRK={0xbb, 0xfc, "ce0878d53f26012cc01acfe145b41b0a0ec4136e9e9c366abc1163819fecd8ab0b016d1fae725fdd3bbcc43f8cd5b0560d794f7335fb788e9937827a9a42fdc4d73c10e2d83fc3f471893bf753cf6ca6caa20535e44c2e4f023b130ced13e94ff579432051f6e6875e23b39b2b87b029122eef81a290d7d600950db9270e296dc2dc6f57d6fe97b1e768b96db63ca09168137743f5afdcefa26c9d4733b366e54f20eaa1a4a64f292e831092e66994210f9810996f5005"}], @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4, 0x40}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1f}]}, @NL80211_ATTR_IE={0xad, 0x2a, [@ibss={0x6, 0x2, 0x3}, @fast_bss_trans={0x37, 0xa3, {0x7, 0x3, "6bf1646a2efc2e15363c1fac649395b4", "72d72c3283b7c02a69417eafe0821e8e2237aabb7e605b0e1fdeecbab305c6d6", "a96c90116f81439e8abf6f5787f4a75e34e2ec8715c241e80df9ec1da53524f3", [{0x1, 0x27, "0ff66f3f396684de13e44d6f865fffc490aa97d4dcbe39f3ffc7b6948bcadb1630319dc44fed63"}, {0x2, 0xd, "ed97795d8c68e4785dad9c27b1"}, {0x3, 0x17, "afabb91af22ab3619844fe1cffa8b78934d830d38cdc36"}]}}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20010}, 0x48010) r4 = fsmount(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x98, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "93efaac98bfdcd70382505cd6590f662"}, @NL80211_ATTR_PMK={0x14, 0xfe, "61172606e7667c3388e064b4616387ea"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "a692ce4f7e83d72b876dad92a6a9f677"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "606ce43f1df7b2177afe328b9d67ea98"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e924e613c43d766db9807efac5d63d51"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1024}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x34, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1450}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15a4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x10) 15:06:44 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) socketpair(0x2, 0x2, 0x7, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x8000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x24, 0x3a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4090) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r4, 0x10c, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xeb91}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x10d1) r5 = fsmount(0xffffffffffffffff, 0x0, 0xa) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000008c0)={0x328, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa65a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd16b}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xead}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c97}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6703}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb8c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d69d20d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7811ec98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c6e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r6 = accept(r5, 0x0, &(0x7f0000000c80)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r4, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4804) accept(r6, &(0x7f0000000dc0)=@qipcrtr, &(0x7f0000000e40)=0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:06:44 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, @remote, @private0, 0x7, 0x8, 0xc78, 0x200}}) r8 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r8, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r11) ioctl$RFKILL_IOCTL_NOINPUT(r11, 0x5201) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:06:44 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = msgget(0x0, 0x5) msgrcv(r2, &(0x7f0000000800)={0x0, ""/135}, 0x8f, 0x0, 0x3000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000c40)={&(0x7f0000000900), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x400}, @ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000090) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:06:44 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r2, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800) r4 = accept(r3, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000500), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/17, 0x11}, {&(0x7f0000000800)=""/46, 0x2e}], 0x5, &(0x7f00000008c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000a80)={@initdev, @remote}, &(0x7f0000000ac0)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x13380000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:06:44 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = msgget(0x0, 0x5) msgrcv(r2, &(0x7f0000000800)={0x0, ""/135}, 0x8f, 0x0, 0x3000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000c40)={&(0x7f0000000900), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x400}, @ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000090) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:06:52 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) socketpair(0x2, 0x2, 0x7, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x8000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x24, 0x3a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4090) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r4, 0x10c, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xeb91}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x10d1) r5 = fsmount(0xffffffffffffffff, 0x0, 0xa) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000008c0)={0x328, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa65a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd16b}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xead}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c97}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6703}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb8c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d69d20d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7811ec98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c6e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4000}, 0x804) r6 = accept(r5, 0x0, &(0x7f0000000c80)) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x1c, r4, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4804) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:06:52 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002880)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x40) openat$autofs(0xffffffffffffff9c, &(0x7f00000029c0), 0x113002, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r2) 15:06:52 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r2, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800) r4 = accept(r3, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000500), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/17, 0x11}, {&(0x7f0000000800)=""/46, 0x2e}], 0x5, &(0x7f00000008c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000a80)={@initdev, @remote}, &(0x7f0000000ac0)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000b40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r6, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x13380000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x7c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:06:52 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1898}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x400}, 0x41) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3e8, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9844f58}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "03045c59874af1cf4497b82851f3f663ae921df650"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "e25a4b9c51caadf1baa337d62d7fa023a55ab64f4d36a9af55eeeab814caf44e844f5a345338522ed17feb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x161f}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3c170325225d6b855b9de7176ba3677bc687df5a49d3e75cbfe9"}}, @TIPC_NLA_NODE_ID={0x28, 0x3, "ecd9415419e82213541d1d971e8c949be964f7fcd3dbcf7d29ddf664a5d429b15a287cc3"}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4dd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd492}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "645687102b0cc70bd941c8abb94128ce5de6f1b9a360bb9323e94db7d3e90c36cd44d1319665d8eec240e7b8686c955b32c758d0c976986af2681ad2c1a5150574398c75fe517955c3db013ada4f3ad740904eeba162d9c9eb82bdd5c648ec1b8cbc4a4d79d5995405040987d7d4e51f6a486e571ac1a1737a28f316d4ec2c10708738e55ed38fcf1d30b38f183ecfdbebeea14455b0e414ca453a30aafc0fcfda2ea6c71b972a988bbe50970be75b55e512aab0c0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5c6cda21f5e204553f4203220f8dc617a16ee2b809655edc3e3455842ed3"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a0963d58f57e902a74c488824ee8a8f17ec3b7334499be5b9c8e1e3c6dbd5f000291"}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x553}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x56}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1d0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1c, 0xfa, "12b18b308babfcd5149f2b67f296e2685ca60cdc00ebbc56"}, @NL80211_ATTR_FILS_ERP_RRK={0xbb, 0xfc, "ce0878d53f26012cc01acfe145b41b0a0ec4136e9e9c366abc1163819fecd8ab0b016d1fae725fdd3bbcc43f8cd5b0560d794f7335fb788e9937827a9a42fdc4d73c10e2d83fc3f471893bf753cf6ca6caa20535e44c2e4f023b130ced13e94ff579432051f6e6875e23b39b2b87b029122eef81a290d7d600950db9270e296dc2dc6f57d6fe97b1e768b96db63ca09168137743f5afdcefa26c9d4733b366e54f20eaa1a4a64f292e831092e66994210f9810996f5005"}], @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4, 0x40}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1f}]}, @NL80211_ATTR_IE={0xad, 0x2a, [@ibss={0x6, 0x2, 0x3}, @fast_bss_trans={0x37, 0xa3, {0x7, 0x3, "6bf1646a2efc2e15363c1fac649395b4", "72d72c3283b7c02a69417eafe0821e8e2237aabb7e605b0e1fdeecbab305c6d6", "a96c90116f81439e8abf6f5787f4a75e34e2ec8715c241e80df9ec1da53524f3", [{0x1, 0x27, "0ff66f3f396684de13e44d6f865fffc490aa97d4dcbe39f3ffc7b6948bcadb1630319dc44fed63"}, {0x2, 0xd, "ed97795d8c68e4785dad9c27b1"}, {0x3, 0x17, "afabb91af22ab3619844fe1cffa8b78934d830d38cdc36"}]}}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20010}, 0x48010) r4 = fsmount(r3, 0x0, 0x0) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000000d40)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c40)={0x98, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "93efaac98bfdcd70382505cd6590f662"}, @NL80211_ATTR_PMK={0x14, 0xfe, "61172606e7667c3388e064b4616387ea"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "a692ce4f7e83d72b876dad92a6a9f677"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "606ce43f1df7b2177afe328b9d67ea98"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "e924e613c43d766db9807efac5d63d51"}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) 15:06:52 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = memfd_secret(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x1) r7 = socket(0x1d, 0x6, 0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x23}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x20044004) vmsplice(r4, &(0x7f0000001540)=[{&(0x7f0000000500)="f467adc5a8f1715382a06fb25852bdba22e815b822303251af05c7b07fdf7921ac8ec438db25b69bea47d69a04a5", 0x2e}, {&(0x7f0000000540)="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", 0x1000}], 0x2, 0xc) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xab2f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001700)={0x0, @can, @nfc={0x27, 0x1, 0x0, 0x5}, @nfc={0x27, 0x0, 0x0, 0x1}, 0xf428, 0x0, 0x0, 0x0, 0xff06, &(0x7f00000016c0)='ip_vti0\x00', 0x40, 0x6, 0x5}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 15:06:52 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, @remote, @private0, 0x7, 0x8, 0xc78, 0x200}}) r8 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r8, {0x0, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), r11) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:06:52 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = msgget(0x0, 0x5) msgrcv(r2, &(0x7f0000000800)={0x0, ""/135}, 0x8f, 0x0, 0x3000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000c40)={&(0x7f0000000900), 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, 0x0, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x400}, @ETHTOOL_A_RINGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x2}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0xff}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000090) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:06:52 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r5 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x94, r6, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x800, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x20000011) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a80)={'wlan1\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r5) [ 172.335165] kmemleak: Found object by alias at 0x607f1a63821c [ 172.335185] CPU: 1 UID: 0 PID: 4317 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 172.335204] Tainted: [W]=WARN [ 172.335207] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 172.335215] Call Trace: [ 172.335219] [ 172.335224] dump_stack_lvl+0xca/0x120 [ 172.335252] __lookup_object+0x94/0xb0 [ 172.335269] delete_object_full+0x27/0x70 [ 172.335285] free_percpu+0x30/0x1160 [ 172.335302] ? arch_uprobe_clear_state+0x16/0x140 [ 172.335323] futex_hash_free+0x38/0xc0 [ 172.335337] mmput+0x2d3/0x390 [ 172.335356] do_exit+0x79d/0x2970 [ 172.335374] ? __pfx_do_exit+0x10/0x10 [ 172.335388] ? find_held_lock+0x2b/0x80 [ 172.335406] ? get_signal+0x835/0x2340 [ 172.335427] do_group_exit+0xd3/0x2a0 [ 172.335442] get_signal+0x2315/0x2340 [ 172.335460] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 172.335477] ? __pfx_get_signal+0x10/0x10 [ 172.335493] ? do_futex+0x135/0x370 [ 172.335507] ? __pfx_do_futex+0x10/0x10 [ 172.335522] arch_do_signal_or_restart+0x80/0x790 [ 172.335541] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 172.335557] ? __x64_sys_futex+0x1c9/0x4d0 [ 172.335569] ? __x64_sys_futex+0x1d2/0x4d0 [ 172.335583] ? __x64_sys_openat+0x142/0x200 [ 172.335600] ? __pfx___x64_sys_futex+0x10/0x10 [ 172.335613] ? xfd_validate_state+0x55/0x180 [ 172.335639] exit_to_user_mode_loop+0x8b/0x110 [ 172.335652] do_syscall_64+0x2f7/0x360 [ 172.335664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.335676] RIP: 0033:0x7f3fbfe04b19 [ 172.335685] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 172.335691] RSP: 002b:00007f3fbd37a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 172.335702] RAX: fffffffffffffe00 RBX: 00007f3fbff17f68 RCX: 00007f3fbfe04b19 [ 172.335710] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3fbff17f68 [ 172.335717] RBP: 00007f3fbff17f60 R08: 0000000000000000 R09: 0000000000000000 [ 172.335724] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3fbff17f6c [ 172.335731] R13: 00007fffbbf612af R14: 00007f3fbd37a300 R15: 0000000000022000 [ 172.335747] [ 172.335751] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 172.335758] kmemleak: comm "syz-executor.5", pid 4316, jiffies 4294839181 [ 172.335765] kmemleak: min_count = 1 [ 172.335769] kmemleak: count = 0 [ 172.335773] kmemleak: flags = 0x21 [ 172.335776] kmemleak: checksum = 0 [ 172.335780] kmemleak: backtrace: [ 172.335784] pcpu_alloc_noprof+0x87a/0x1170 [ 172.335799] percpu_ref_init+0x37/0x400 [ 172.335817] io_uring_setup+0x44c/0x2000 [ 172.335828] __x64_sys_io_uring_setup+0xc8/0x170 [ 172.335839] do_syscall_64+0xbf/0x360 [ 172.335848] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:06:52 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = msgget(0x0, 0x5) msgrcv(r2, &(0x7f0000000800)={0x0, ""/135}, 0x8f, 0x0, 0x3000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:06:52 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002880)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x40) openat$autofs(0xffffffffffffff9c, &(0x7f00000029c0), 0x113002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r2) 15:06:52 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r2, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800) r4 = accept(r3, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000500), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/17, 0x11}, {&(0x7f0000000800)=""/46, 0x2e}], 0x5, &(0x7f00000008c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000a80)={@initdev, @remote}, &(0x7f0000000ac0)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:01 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r5 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x94, r6, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x800, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x20000011) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r3) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r5) 15:07:01 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, @remote, @private0, 0x7, 0x8, 0xc78, 0x200}}) r8 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r8, {0x0, 0xffffffffffffffff}}, './file0\x00'}) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:07:01 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = msgget(0x0, 0x5) msgrcv(r2, &(0x7f0000000800)={0x0, ""/135}, 0x8f, 0x0, 0x3000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:01 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = memfd_secret(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x1) r7 = socket(0x1d, 0x6, 0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x23}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x20044004) vmsplice(r4, &(0x7f0000001540)=[{&(0x7f0000000500)="f467adc5a8f1715382a06fb25852bdba22e815b822303251af05c7b07fdf7921ac8ec438db25b69bea47d69a04a5", 0x2e}, {&(0x7f0000000540)="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", 0x1000}], 0x2, 0xc) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xab2f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001700)={0x0, @can, @nfc={0x27, 0x1, 0x0, 0x5}, @nfc={0x27, 0x0, 0x0, 0x1}, 0xf428, 0x0, 0x0, 0x0, 0xff06, &(0x7f00000016c0)='ip_vti0\x00', 0x40, 0x6, 0x5}) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 15:07:01 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1898}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x400}, 0x41) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3e8, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9844f58}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "03045c59874af1cf4497b82851f3f663ae921df650"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "e25a4b9c51caadf1baa337d62d7fa023a55ab64f4d36a9af55eeeab814caf44e844f5a345338522ed17feb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x161f}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3c170325225d6b855b9de7176ba3677bc687df5a49d3e75cbfe9"}}, @TIPC_NLA_NODE_ID={0x28, 0x3, "ecd9415419e82213541d1d971e8c949be964f7fcd3dbcf7d29ddf664a5d429b15a287cc3"}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4dd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd492}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "645687102b0cc70bd941c8abb94128ce5de6f1b9a360bb9323e94db7d3e90c36cd44d1319665d8eec240e7b8686c955b32c758d0c976986af2681ad2c1a5150574398c75fe517955c3db013ada4f3ad740904eeba162d9c9eb82bdd5c648ec1b8cbc4a4d79d5995405040987d7d4e51f6a486e571ac1a1737a28f316d4ec2c10708738e55ed38fcf1d30b38f183ecfdbebeea14455b0e414ca453a30aafc0fcfda2ea6c71b972a988bbe50970be75b55e512aab0c0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5c6cda21f5e204553f4203220f8dc617a16ee2b809655edc3e3455842ed3"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a0963d58f57e902a74c488824ee8a8f17ec3b7334499be5b9c8e1e3c6dbd5f000291"}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x553}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x56}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b80)={&(0x7f0000000980)={0x1d0, 0x0, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x55}}}}, [@NL80211_ATTR_WIPHY_FREQ_HINT={0x8}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1c, 0xfa, "12b18b308babfcd5149f2b67f296e2685ca60cdc00ebbc56"}, @NL80211_ATTR_FILS_ERP_RRK={0xbb, 0xfc, "ce0878d53f26012cc01acfe145b41b0a0ec4136e9e9c366abc1163819fecd8ab0b016d1fae725fdd3bbcc43f8cd5b0560d794f7335fb788e9937827a9a42fdc4d73c10e2d83fc3f471893bf753cf6ca6caa20535e44c2e4f023b130ced13e94ff579432051f6e6875e23b39b2b87b029122eef81a290d7d600950db9270e296dc2dc6f57d6fe97b1e768b96db63ca09168137743f5afdcefa26c9d4733b366e54f20eaa1a4a64f292e831092e66994210f9810996f5005"}], @NL80211_ATTR_BSS_SELECT={0x1c, 0xe3, 0x0, 0x1, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4, 0x40}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x1f}]}, @NL80211_ATTR_IE={0xad, 0x2a, [@ibss={0x6, 0x2, 0x3}, @fast_bss_trans={0x37, 0xa3, {0x7, 0x3, "6bf1646a2efc2e15363c1fac649395b4", "72d72c3283b7c02a69417eafe0821e8e2237aabb7e605b0e1fdeecbab305c6d6", "a96c90116f81439e8abf6f5787f4a75e34e2ec8715c241e80df9ec1da53524f3", [{0x1, 0x27, "0ff66f3f396684de13e44d6f865fffc490aa97d4dcbe39f3ffc7b6948bcadb1630319dc44fed63"}, {0x2, 0xd, "ed97795d8c68e4785dad9c27b1"}, {0x3, 0x17, "afabb91af22ab3619844fe1cffa8b78934d830d38cdc36"}]}}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20010}, 0x48010) fsmount(r3, 0x0, 0x0) 15:07:01 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r2, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800) r4 = accept(r3, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000500), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/17, 0x11}, {&(0x7f0000000800)=""/46, 0x2e}], 0x5, &(0x7f00000008c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000a80)={@initdev, @remote}, &(0x7f0000000ac0)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:01 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002880)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x40) openat$autofs(0xffffffffffffff9c, &(0x7f00000029c0), 0x113002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r2) 15:07:01 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) socketpair(0x2, 0x2, 0x7, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x8000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x24, 0x3a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4090) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r4, 0x10c, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xeb91}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x10d1) r5 = fsmount(0xffffffffffffffff, 0x0, 0xa) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000008c0)={0x328, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa65a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd16b}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xead}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c97}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6703}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb8c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d69d20d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7811ec98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c6e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4000}, 0x804) accept(r5, 0x0, &(0x7f0000000c80)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:07:01 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1898}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x400}, 0x41) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3e8, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9844f58}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "03045c59874af1cf4497b82851f3f663ae921df650"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "e25a4b9c51caadf1baa337d62d7fa023a55ab64f4d36a9af55eeeab814caf44e844f5a345338522ed17feb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x161f}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3c170325225d6b855b9de7176ba3677bc687df5a49d3e75cbfe9"}}, @TIPC_NLA_NODE_ID={0x28, 0x3, "ecd9415419e82213541d1d971e8c949be964f7fcd3dbcf7d29ddf664a5d429b15a287cc3"}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4dd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd492}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "645687102b0cc70bd941c8abb94128ce5de6f1b9a360bb9323e94db7d3e90c36cd44d1319665d8eec240e7b8686c955b32c758d0c976986af2681ad2c1a5150574398c75fe517955c3db013ada4f3ad740904eeba162d9c9eb82bdd5c648ec1b8cbc4a4d79d5995405040987d7d4e51f6a486e571ac1a1737a28f316d4ec2c10708738e55ed38fcf1d30b38f183ecfdbebeea14455b0e414ca453a30aafc0fcfda2ea6c71b972a988bbe50970be75b55e512aab0c0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5c6cda21f5e204553f4203220f8dc617a16ee2b809655edc3e3455842ed3"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a0963d58f57e902a74c488824ee8a8f17ec3b7334499be5b9c8e1e3c6dbd5f000291"}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x553}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x56}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000900)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) fsmount(r3, 0x0, 0x0) 15:07:01 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = msgget(0x0, 0x5) msgrcv(r2, &(0x7f0000000800)={0x0, ""/135}, 0x8f, 0x0, 0x3000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:01 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002880)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x40) openat$autofs(0xffffffffffffff9c, &(0x7f00000029c0), 0x113002, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r2) 15:07:01 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r2, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800) r4 = accept(r3, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000500), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/17, 0x11}, {&(0x7f0000000800)=""/46, 0x2e}], 0x5, &(0x7f00000008c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000a80)={@initdev, @remote}, &(0x7f0000000ac0)=0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000b40)={'wlan1\x00'}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:01 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = memfd_secret(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x1) r7 = socket(0x1d, 0x6, 0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x23}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x20044004) vmsplice(r4, &(0x7f0000001540)=[{&(0x7f0000000500)="f467adc5a8f1715382a06fb25852bdba22e815b822303251af05c7b07fdf7921ac8ec438db25b69bea47d69a04a5", 0x2e}, {&(0x7f0000000540)="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", 0x1000}], 0x2, 0xc) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x50, 0x0, 0x300, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xab2f}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r7) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 15:07:01 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r2, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800) r4 = accept(r3, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000500), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/17, 0x11}, {&(0x7f0000000800)=""/46, 0x2e}], 0x5, &(0x7f00000008c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2) sendmsg$NL80211_CMD_JOIN_OCB(r5, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80) getsockopt$inet_mreqn(r4, 0x0, 0x20, &(0x7f0000000a80)={@initdev, @remote}, &(0x7f0000000ac0)=0xc) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:01 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1898}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x400}, 0x41) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3e8, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9844f58}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "03045c59874af1cf4497b82851f3f663ae921df650"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "e25a4b9c51caadf1baa337d62d7fa023a55ab64f4d36a9af55eeeab814caf44e844f5a345338522ed17feb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x161f}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3c170325225d6b855b9de7176ba3677bc687df5a49d3e75cbfe9"}}, @TIPC_NLA_NODE_ID={0x28, 0x3, "ecd9415419e82213541d1d971e8c949be964f7fcd3dbcf7d29ddf664a5d429b15a287cc3"}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4dd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd492}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "645687102b0cc70bd941c8abb94128ce5de6f1b9a360bb9323e94db7d3e90c36cd44d1319665d8eec240e7b8686c955b32c758d0c976986af2681ad2c1a5150574398c75fe517955c3db013ada4f3ad740904eeba162d9c9eb82bdd5c648ec1b8cbc4a4d79d5995405040987d7d4e51f6a486e571ac1a1737a28f316d4ec2c10708738e55ed38fcf1d30b38f183ecfdbebeea14455b0e414ca453a30aafc0fcfda2ea6c71b972a988bbe50970be75b55e512aab0c0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5c6cda21f5e204553f4203220f8dc617a16ee2b809655edc3e3455842ed3"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a0963d58f57e902a74c488824ee8a8f17ec3b7334499be5b9c8e1e3c6dbd5f000291"}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x553}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x56}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x80) fsmount(0xffffffffffffffff, 0x0, 0x0) 15:07:01 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002880)={{0x1, 0x1, 0x18, r5, {0x6}}, './file0\x00'}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r6, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x30, r4, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffffffff, 0x5d}}}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2002}]}, 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x40) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r2) 15:07:01 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = msgget(0x0, 0x5) msgrcv(r2, &(0x7f0000000800)={0x0, ""/135}, 0x8f, 0x0, 0x3000) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r3) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:10 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = memfd_secret(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x1) r7 = socket(0x1d, 0x6, 0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x23}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x20044004) vmsplice(r4, &(0x7f0000001540)=[{&(0x7f0000000500)="f467adc5a8f1715382a06fb25852bdba22e815b822303251af05c7b07fdf7921ac8ec438db25b69bea47d69a04a5", 0x2e}, {&(0x7f0000000540)="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", 0x1000}], 0x2, 0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r7) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 15:07:10 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1898}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x400}, 0x41) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3e8, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9844f58}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "03045c59874af1cf4497b82851f3f663ae921df650"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "e25a4b9c51caadf1baa337d62d7fa023a55ab64f4d36a9af55eeeab814caf44e844f5a345338522ed17feb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x161f}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3c170325225d6b855b9de7176ba3677bc687df5a49d3e75cbfe9"}}, @TIPC_NLA_NODE_ID={0x28, 0x3, "ecd9415419e82213541d1d971e8c949be964f7fcd3dbcf7d29ddf664a5d429b15a287cc3"}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4dd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd492}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "645687102b0cc70bd941c8abb94128ce5de6f1b9a360bb9323e94db7d3e90c36cd44d1319665d8eec240e7b8686c955b32c758d0c976986af2681ad2c1a5150574398c75fe517955c3db013ada4f3ad740904eeba162d9c9eb82bdd5c648ec1b8cbc4a4d79d5995405040987d7d4e51f6a486e571ac1a1737a28f316d4ec2c10708738e55ed38fcf1d30b38f183ecfdbebeea14455b0e414ca453a30aafc0fcfda2ea6c71b972a988bbe50970be75b55e512aab0c0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5c6cda21f5e204553f4203220f8dc617a16ee2b809655edc3e3455842ed3"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a0963d58f57e902a74c488824ee8a8f17ec3b7334499be5b9c8e1e3c6dbd5f000291"}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x553}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x56}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) fsmount(0xffffffffffffffff, 0x0, 0x0) 15:07:10 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, @remote, @private0, 0x7, 0x8, 0xc78, 0x200}}) r8 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r8, {0x0, 0xffffffffffffffff}}, './file0\x00'}) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:07:10 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) socketpair(0x2, 0x2, 0x7, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x8000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x24, 0x3a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4090) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r4, 0x10c, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xeb91}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x10d1) r5 = fsmount(0xffffffffffffffff, 0x0, 0xa) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000c40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000c00)={&(0x7f00000008c0)={0x328, 0x0, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xa65a}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd16b}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9a}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xead}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1c97}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x20}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6703}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb8c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_BEARER={0x78, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffa}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5d69d20d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x401}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7811ec98}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1e0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c6e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf2}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x61d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8}]}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x4000}, 0x804) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:07:10 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r2, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800) accept(r3, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000500), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/17, 0x11}, {&(0x7f0000000800)=""/46, 0x2e}], 0x5, &(0x7f00000008c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:10 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r1) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000002880)={{0x1, 0x1, 0x18, r4, {0x6}}, './file0\x00'}) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r2) 15:07:10 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) r3 = accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r5 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r5, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000009c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0x94, r6, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x800, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x40}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x61}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1b}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x20000011) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r5) 15:07:10 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = msgget(0x0, 0x5) msgrcv(r2, &(0x7f0000000800)={0x0, ""/135}, 0x8f, 0x0, 0x3000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:10 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r1) 15:07:10 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r2, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800) accept(r3, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000500), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/17, 0x11}, {&(0x7f0000000800)=""/46, 0x2e}], 0x5, &(0x7f00000008c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2) sendmsg$NL80211_CMD_JOIN_OCB(r4, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xff}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:10 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = memfd_secret(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x1) r7 = socket(0x1d, 0x6, 0x8) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x28, r5, 0x0, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x0, 0x23}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x20044004) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r7) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 15:07:10 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r1) 15:07:10 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = msgget(0x0, 0x5) msgrcv(r2, &(0x7f0000000800)={0x0, ""/135}, 0x8f, 0x0, 0x3000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:10 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r4 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000880)={'wlan1\x00'}) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r4) [ 195.973978] Bluetooth: hci7: command 0x0406 tx timeout [ 195.975011] Bluetooth: hci5: command 0x0406 tx timeout [ 195.975148] Bluetooth: hci0: command 0x0406 tx timeout [ 195.977858] Bluetooth: hci4: command 0x0406 tx timeout [ 195.978613] Bluetooth: hci2: command 0x0406 tx timeout [ 195.978744] Bluetooth: hci1: command 0x0406 tx timeout [ 195.979458] Bluetooth: hci3: command 0x0406 tx timeout [ 195.980283] Bluetooth: hci6: command 0x0406 tx timeout 15:07:20 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r1) 15:07:20 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = memfd_secret(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x1) r7 = socket(0x1d, 0x6, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r7) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r8, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 15:07:20 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = msgget(0x0, 0x5) msgrcv(r2, &(0x7f0000000800)={0x0, ""/135}, 0x8f, 0x0, 0x3000) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:20 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1898}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x400}, 0x41) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3e8, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9844f58}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "03045c59874af1cf4497b82851f3f663ae921df650"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "e25a4b9c51caadf1baa337d62d7fa023a55ab64f4d36a9af55eeeab814caf44e844f5a345338522ed17feb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x161f}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3c170325225d6b855b9de7176ba3677bc687df5a49d3e75cbfe9"}}, @TIPC_NLA_NODE_ID={0x28, 0x3, "ecd9415419e82213541d1d971e8c949be964f7fcd3dbcf7d29ddf664a5d429b15a287cc3"}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4dd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd492}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "645687102b0cc70bd941c8abb94128ce5de6f1b9a360bb9323e94db7d3e90c36cd44d1319665d8eec240e7b8686c955b32c758d0c976986af2681ad2c1a5150574398c75fe517955c3db013ada4f3ad740904eeba162d9c9eb82bdd5c648ec1b8cbc4a4d79d5995405040987d7d4e51f6a486e571ac1a1737a28f316d4ec2c10708738e55ed38fcf1d30b38f183ecfdbebeea14455b0e414ca453a30aafc0fcfda2ea6c71b972a988bbe50970be75b55e512aab0c0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5c6cda21f5e204553f4203220f8dc617a16ee2b809655edc3e3455842ed3"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a0963d58f57e902a74c488824ee8a8f17ec3b7334499be5b9c8e1e3c6dbd5f000291"}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x553}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/tty/drivers\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8000, 0x56}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008080}, 0x800) fsmount(0xffffffffffffffff, 0x0, 0x0) 15:07:20 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r3) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:07:20 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, @remote, @private0, 0x7, 0x8, 0xc78, 0x200}}) r8 = accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008800) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r8, {0x0, 0xffffffffffffffff}}, './file0\x00'}) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:07:20 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r2, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800) accept(r3, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80) recvmsg$unix(r3, &(0x7f0000000900)={&(0x7f0000000500), 0x6e, &(0x7f0000000840)=[{&(0x7f0000000580)=""/147, 0x93}, {&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f0000000740)=""/68, 0x44}, {&(0x7f00000007c0)=""/17, 0x11}, {&(0x7f0000000800)=""/46, 0x2e}], 0x5, &(0x7f00000008c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:20 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) socketpair(0x2, 0x2, 0x7, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x8000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x24, 0x3a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4090) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r4, 0x10c, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xeb91}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x10d1) fsmount(0xffffffffffffffff, 0x0, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:07:20 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) msgget(0x0, 0x5) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:20 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) msgget(0x1, 0x20) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:20 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r1) 15:07:20 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) r2 = socket$packet(0x11, 0x2, 0x300) r3 = accept4(r2, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800) accept(r3, &(0x7f0000000380)=@ieee802154, &(0x7f0000000400)=0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:20 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:20 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r0) 15:07:20 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) r2 = socket$packet(0x11, 0x2, 0x300) accept4(r2, &(0x7f00000002c0)=@nfc, &(0x7f0000000340)=0x80, 0x800) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:20 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) socketpair(0x2, 0x2, 0x7, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x8000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x24, 0x3a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4090) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x5c, r4, 0x10c, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xeb91}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3f}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x101}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x10d1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:07:20 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1898}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x400}, 0x41) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3e8, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9844f58}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "03045c59874af1cf4497b82851f3f663ae921df650"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "e25a4b9c51caadf1baa337d62d7fa023a55ab64f4d36a9af55eeeab814caf44e844f5a345338522ed17feb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x161f}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3c170325225d6b855b9de7176ba3677bc687df5a49d3e75cbfe9"}}, @TIPC_NLA_NODE_ID={0x28, 0x3, "ecd9415419e82213541d1d971e8c949be964f7fcd3dbcf7d29ddf664a5d429b15a287cc3"}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4dd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd492}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "645687102b0cc70bd941c8abb94128ce5de6f1b9a360bb9323e94db7d3e90c36cd44d1319665d8eec240e7b8686c955b32c758d0c976986af2681ad2c1a5150574398c75fe517955c3db013ada4f3ad740904eeba162d9c9eb82bdd5c648ec1b8cbc4a4d79d5995405040987d7d4e51f6a486e571ac1a1737a28f316d4ec2c10708738e55ed38fcf1d30b38f183ecfdbebeea14455b0e414ca453a30aafc0fcfda2ea6c71b972a988bbe50970be75b55e512aab0c0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5c6cda21f5e204553f4203220f8dc617a16ee2b809655edc3e3455842ed3"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a0963d58f57e902a74c488824ee8a8f17ec3b7334499be5b9c8e1e3c6dbd5f000291"}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x553}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000640)='/proc/tty/drivers\x00', 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) 15:07:20 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, @remote, @private0, 0x7, 0x8, 0xc78, 0x200}}) accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1c4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008800) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:07:20 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f00000003c0)={0x394, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe0000000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x40}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff9}]}, @TIPC_NLA_LINK={0xd8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff7c45}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xe6, @private1, 0x8}}, {0x14, 0x2, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2f}}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdeca}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf310}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'macsec0\x00'}}]}, @TIPC_NLA_SOCK={0x28, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4284d948}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xee, 0x3, "d229d86d95b4d076d73e3e0061a233e0133c66fee350a1c0094c0b7d97335707ad9956ca220b8ecdc7134150752776ad47a5b901293b67a34d46c65f4d9077e504dfc84e50dab4701419fc1ee47925f49cf584e063aec7c158b97843a914340a262aef44f7d6551889596f00a1c48f3082dd7cd7d9c1e629b69d1977b7ea6407e2c458e7d815feaac19dd9cadf26f0576e0fa596ece51e0a2dce507c097fc615e92db2610b15037b9bc471da0afdcb35f635b7b9ab0e88017de3720a74eb2de33d63c9fff8145b2b87272dea58d0b759e1ee5b6de60892d0a67eb85f5dfcc53227eab195de0f82f43247"}]}, @TIPC_NLA_SOCK={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x81}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000080) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:21 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:07:21 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) socket$packet(0x11, 0x2, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:21 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = memfd_secret(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x94, r5, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x8, 0x2c}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x80}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 15:07:30 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x1f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x139}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x247}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8040) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:30 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, @remote, @private0, 0x7, 0x8, 0xc78, 0x200}}) accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000700)) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:07:30 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:07:30 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) socketpair(0x2, 0x2, 0x7, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x8000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x24, 0x3a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4090) syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:07:30 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1898}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x400}, 0x41) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)={0x3e8, r0, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x20}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4b}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9844f58}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "03045c59874af1cf4497b82851f3f663ae921df650"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2f, 0x3, "e25a4b9c51caadf1baa337d62d7fa023a55ab64f4d36a9af55eeeab814caf44e844f5a345338522ed17feb"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x161f}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "3c170325225d6b855b9de7176ba3677bc687df5a49d3e75cbfe9"}}, @TIPC_NLA_NODE_ID={0x28, 0x3, "ecd9415419e82213541d1d971e8c949be964f7fcd3dbcf7d29ddf664a5d429b15a287cc3"}]}, @TIPC_NLA_MEDIA={0x88, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4dd6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd492}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7ff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x101}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_NODE={0x15c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xb9, 0x3, "645687102b0cc70bd941c8abb94128ce5de6f1b9a360bb9323e94db7d3e90c36cd44d1319665d8eec240e7b8686c955b32c758d0c976986af2681ad2c1a5150574398c75fe517955c3db013ada4f3ad740904eeba162d9c9eb82bdd5c648ec1b8cbc4a4d79d5995405040987d7d4e51f6a486e571ac1a1737a28f316d4ec2c10708738e55ed38fcf1d30b38f183ecfdbebeea14455b0e414ca453a30aafc0fcfda2ea6c71b972a988bbe50970be75b55e512aab0c0"}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "5c6cda21f5e204553f4203220f8dc617a16ee2b809655edc3e3455842ed3"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "a0963d58f57e902a74c488824ee8a8f17ec3b7334499be5b9c8e1e3c6dbd5f000291"}}]}, @TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x69}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7c}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x553}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}]}]}]}, 0x3e8}, 0x1, 0x0, 0x0, 0x4000}, 0x40000d0) fsmount(0xffffffffffffffff, 0x0, 0x0) 15:07:30 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r0) 15:07:30 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 15:07:30 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) r1 = accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x28008014}, 0x4004041) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:30 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000027c0)=@req={0x28, &(0x7f0000002780)={'bridge_slave_0\x00', @ifru_flags}}) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r0) 15:07:39 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:39 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:07:39 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, @remote, @private0, 0x7, 0x8, 0xc78, 0x200}}) accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:07:39 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 15:07:39 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:39 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) recvmmsg$unix(0xffffffffffffffff, &(0x7f00000025c0)=[{{&(0x7f0000000080), 0x6e, &(0x7f0000001440)=[{&(0x7f0000000100)=""/56, 0x38}, {&(0x7f0000000140)=""/142, 0x8e}, {&(0x7f0000000200)=""/205, 0xcd}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)}, {&(0x7f0000000400)}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x7, &(0x7f00000014c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001500)=""/227, 0xe3}, {&(0x7f0000001600)=""/206, 0xce}, {&(0x7f0000001700)=""/113, 0x71}, {&(0x7f0000001780)=""/56, 0x38}], 0x4, &(0x7f0000001800)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x60}}, {{&(0x7f0000001880)=@abs, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001900)=""/47, 0x2f}], 0x1, &(0x7f0000001980)=[@cred={{0x1c}}], 0x20}}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/184, 0xb8}, {&(0x7f0000001a80)=""/133, 0x85}, {&(0x7f0000001b40)=""/243, 0xf3}, {&(0x7f0000001c40)=""/24, 0x18}, {&(0x7f0000001c80)=""/95, 0x5f}, {&(0x7f0000001d00)=""/42, 0x2a}], 0x6}}, {{&(0x7f0000001dc0), 0x6e, &(0x7f0000002380)=[{&(0x7f0000001e40)=""/192, 0xc0}, {&(0x7f0000001f00)=""/221, 0xdd}, {&(0x7f0000002000)=""/227, 0xe3}, {&(0x7f0000002100)=""/211, 0xd3}, {&(0x7f0000002200)=""/144, 0x90}, {&(0x7f00000022c0)=""/161, 0xa1}], 0x6}}, {{0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000002400)=""/58, 0x3a}, {&(0x7f0000002440)=""/23, 0x17}, {&(0x7f0000002480)=""/104, 0x68}], 0x3, &(0x7f0000002540)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}], 0x6, 0x40, &(0x7f0000002740)={0x77359400}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), r0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), r1) 15:07:39 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1898}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x400}, 0x41) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x0) 15:07:39 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) socketpair(0x2, 0x2, 0x7, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x8000) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x24, 0x3a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4090) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:07:39 executing program 3: ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000040)=@req={0x28, &(0x7f0000000000)={'veth0_virt_wifi\x00', @ifru_map}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:07:39 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:39 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r1 = syz_io_uring_complete(r0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r2) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r1) 15:07:39 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = memfd_secret(0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 15:07:39 executing program 2: sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x110, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1898}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x800}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x54}, 0x1, 0x0, 0x0, 0x400}, 0x41) fsmount(0xffffffffffffffff, 0x0, 0x0) 15:07:39 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:07:39 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:07:39 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), 0xffffffffffffffff) 15:07:39 executing program 0: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) accept4(r0, &(0x7f00000000c0)=@ethernet={0x0, @random}, &(0x7f0000000140)=0x80, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:39 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) socketpair(0x2, 0x2, 0x7, &(0x7f0000000440)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x9, 0x77}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4a}]}, 0x48}, 0x1, 0x0, 0x0, 0x200400c5}, 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:07:39 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, @remote, @private0, 0x7, 0x8, 0xc78, 0x200}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:07:39 executing program 2: fsmount(0xffffffffffffffff, 0x0, 0x0) 15:07:39 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) r3 = memfd_secret(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) 15:07:39 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), 0xffffffffffffffff) 15:07:39 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:07:39 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:40 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:07:40 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff6000/0x9000)=nil, 0x9000, 0x1000004, 0x40010, 0xffffffffffffffff, 0x8000000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), 0xffffffffffffffff) 15:07:40 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:40 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:07:49 executing program 0: accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @none}, &(0x7f0000000080)=0x80) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:49 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:07:49 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:07:49 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10e}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x101}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe55c}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40085}, 0x40000) r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:07:49 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) socketpair(0x2, 0x2, 0x7, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:07:49 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:07:49 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r2, 0x660c) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:07:49 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:07:49 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) socketpair(0x2, 0x2, 0x7, &(0x7f0000000440)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:07:49 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:07:49 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:07:49 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x10200, 0x0) 15:07:49 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:07:49 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:07:49 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:07:49 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) 15:07:59 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:07:59 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:07:59 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:07:59 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:07:59 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:07:59 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) 15:07:59 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x10200, 0x0) 15:07:59 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:07:59 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:07:59 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:07:59 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x10200, 0x0) 15:07:59 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) 15:07:59 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:07:59 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:09 executing program 0: openat$ptmx(0xffffffffffffff9c, 0x0, 0x10200, 0x0) 15:08:09 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:08:09 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:09 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:09 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:08:09 executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) 15:08:09 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:08:09 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:08:17 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:17 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:08:17 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp, &(0x7f00000004c0)=0x80) r0 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:08:17 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:08:17 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:08:17 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:08:17 executing program 6: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:17 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 15:08:17 executing program 7: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:08:17 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:17 executing program 3: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000002840)='/proc/consoles\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:08:17 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 15:08:17 executing program 4: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:08:17 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:08:17 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:17 executing program 7: accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:08:17 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:26 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:08:26 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:26 executing program 0: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 15:08:26 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp, &(0x7f00000004c0)=0x80) r0 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:08:26 executing program 2: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:08:26 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:26 executing program 7: accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:08:26 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:26 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:08:26 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:26 executing program 7: openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:08:26 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:26 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:08:26 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:26 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:08:26 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:26 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:08:35 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:35 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:35 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:08:35 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:08:35 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:08:35 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300), &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp, &(0x7f00000004c0)=0x80) r0 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:08:35 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:35 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:35 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:08:35 executing program 0: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:08:35 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:35 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:08:35 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:08:35 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:35 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:35 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:35 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:08:35 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:08:35 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r2 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) 15:08:45 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r2 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) 15:08:45 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:45 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:45 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 15:08:45 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:45 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:08:45 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:45 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:08:54 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:08:54 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r2 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) 15:08:54 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:54 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:08:54 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:08:54 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:54 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:54 executing program 7: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:08:54 executing program 6: r0 = syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:54 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:08:54 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 15:08:54 executing program 6: r0 = syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:54 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:54 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:08:54 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:54 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:08:54 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:08:54 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:08:54 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r2 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) 15:08:54 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 15:08:54 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:08:54 executing program 6: r0 = syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:08:54 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:04 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:04 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:04 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:04 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) syz_genetlink_get_family_id$ethtool(0x0, r0) 15:09:04 executing program 4: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 15:09:04 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:04 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:09:04 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r2 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) 15:09:04 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:09:04 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:04 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:04 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:14 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:09:14 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:09:14 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:14 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:14 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:14 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:14 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) syz_genetlink_get_family_id$ethtool(0x0, r0) 15:09:14 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r2 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) 15:09:14 executing program 6: r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) syz_genetlink_get_family_id$ethtool(0x0, r0) 15:09:14 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:14 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:14 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:14 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:09:14 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:14 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 15:09:14 executing program 6: syz_io_uring_complete(0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), 0xffffffffffffffff) 15:09:14 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:14 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:14 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r2 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) 15:09:14 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:14 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 15:09:25 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:25 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:09:25 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r2 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) 15:09:25 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:25 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:25 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:25 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:25 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:09:34 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:34 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r2 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) 15:09:34 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:09:34 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:34 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:09:34 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:34 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:34 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:34 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:34 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:34 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) 15:09:34 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:34 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:34 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:09:34 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:34 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 15:09:34 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:34 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:09:34 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:09:34 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) 15:09:34 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:34 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) 15:09:35 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:09:35 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:35 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:45 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 15:09:45 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:45 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:09:45 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:09:45 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:45 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:45 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:45 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) 15:09:45 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:45 executing program 6: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) 15:09:54 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:09:54 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:09:54 executing program 6: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) 15:09:54 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:54 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:54 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:54 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 15:09:54 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:09:54 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:54 executing program 6: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) 15:09:54 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:54 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:54 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:09:54 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:54 executing program 5: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:09:54 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:09:54 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:09:54 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:54 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:54 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x2) 15:09:54 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) 15:09:54 executing program 5: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:03 executing program 1: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:10:03 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) 15:10:03 executing program 4: syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:03 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:10:03 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:03 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:03 executing program 5: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:03 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:10:03 executing program 4: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:03 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:10:03 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) 15:10:03 executing program 4: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:03 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:12 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) 15:10:12 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:12 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:12 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:10:12 executing program 4: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:12 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:12 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:10:12 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:12 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:12 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:12 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:12 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:12 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:10:12 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:12 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:12 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:10:23 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:23 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:23 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:23 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:23 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:23 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:23 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:23 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:10:23 executing program 7: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:23 executing program 2: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:23 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:23 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 15:10:23 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:23 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:23 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:23 executing program 7: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:33 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r2 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) 15:10:33 executing program 2: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:33 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:33 executing program 7: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:33 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:33 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 15:10:33 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:33 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:33 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:33 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:33 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:10:33 executing program 2: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:33 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:33 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:33 executing program 4: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:33 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:33 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r2 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r2, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) 15:10:33 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:10:42 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r1 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r1) 15:10:42 executing program 6: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:10:42 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:42 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:42 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:10:42 executing program 4: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:42 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:42 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:42 executing program 4: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:42 executing program 6: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:10:42 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r0 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:10:42 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:42 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:10:51 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r0 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:10:51 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:51 executing program 6: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:10:51 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:51 executing program 0: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:51 executing program 4: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:10:51 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:10:51 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:52 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:52 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:52 executing program 0: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:52 executing program 4: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:10:52 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:10:52 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:52 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:10:52 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:10:52 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:10:52 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4000040) r0 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:11:00 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4000040) r0 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:11:00 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:00 executing program 0: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:00 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:11:00 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:11:00 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:00 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:00 executing program 4: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:11:00 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:11:00 executing program 4: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) [ 420.598537] kmemleak: Found object by alias at 0x607f1a63821c [ 420.598555] CPU: 0 UID: 0 PID: 5750 Comm: iou-sqp-5745 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 420.598573] Tainted: [W]=WARN [ 420.598576] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 420.598583] Call Trace: [ 420.598587] [ 420.598592] dump_stack_lvl+0xca/0x120 [ 420.598620] __lookup_object+0x94/0xb0 [ 420.598637] delete_object_full+0x27/0x70 [ 420.598652] free_percpu+0x30/0x1160 [ 420.598668] ? arch_uprobe_clear_state+0x16/0x140 [ 420.598687] futex_hash_free+0x38/0xc0 [ 420.598701] mmput+0x2d3/0x390 [ 420.598720] do_exit+0x79d/0x2970 [ 420.598737] ? __pfx_do_exit+0x10/0x10 [ 420.598749] ? io_sq_thread+0xfbd/0x1b00 [ 420.598765] ? lock_release+0xc8/0x290 [ 420.598782] io_sq_thread+0xfc9/0x1b00 [ 420.598803] ? __pfx_io_sq_thread+0x10/0x10 [ 420.598819] ? __lock_acquire+0xc65/0x1b70 [ 420.598832] ? __pfx_autoremove_wake_function+0x10/0x10 [ 420.598846] ? __lock_acquire+0xc65/0x1b70 [ 420.598866] ? do_raw_spin_lock+0x123/0x260 [ 420.598882] ? find_held_lock+0x2b/0x80 [ 420.598898] ? __pfx_io_sq_thread+0x10/0x10 [ 420.598912] ? lock_release+0xc8/0x290 [ 420.598926] ? __pfx_io_sq_thread+0x10/0x10 [ 420.598941] ret_from_fork+0x34b/0x430 [ 420.598959] ? __pfx_io_sq_thread+0x10/0x10 [ 420.598973] ret_from_fork_asm+0x1a/0x30 [ 420.598999] [ 420.599003] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 420.599011] kmemleak: comm "syz-executor.2", pid 5754, jiffies 4295087433 [ 420.599018] kmemleak: min_count = 1 [ 420.599022] kmemleak: count = 0 [ 420.599026] kmemleak: flags = 0x21 [ 420.599029] kmemleak: checksum = 0 [ 420.599033] kmemleak: backtrace: [ 420.599037] pcpu_alloc_noprof+0x87a/0x1170 [ 420.599051] percpu_ref_init+0x37/0x400 [ 420.599068] io_uring_setup+0x44c/0x2000 [ 420.599079] __x64_sys_io_uring_setup+0xc8/0x170 [ 420.599089] do_syscall_64+0xbf/0x360 [ 420.599099] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:11:00 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:00 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:00 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:11:00 executing program 4: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:11:08 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:08 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:08 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:11:08 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:08 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:11:08 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:11:08 executing program 4: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:11:08 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:08 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:08 executing program 4: syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:11:08 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) [ 428.661127] kmemleak: Found object by alias at 0x607f1a63821c [ 428.661144] CPU: 1 UID: 0 PID: 5787 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 428.661162] Tainted: [W]=WARN [ 428.661166] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 428.661173] Call Trace: [ 428.661177] [ 428.661182] dump_stack_lvl+0xca/0x120 [ 428.661209] __lookup_object+0x94/0xb0 [ 428.661226] delete_object_full+0x27/0x70 [ 428.661242] free_percpu+0x30/0x1160 [ 428.661258] ? arch_uprobe_clear_state+0x16/0x140 [ 428.661278] futex_hash_free+0x38/0xc0 [ 428.661293] mmput+0x2d3/0x390 [ 428.661311] do_exit+0x79d/0x2970 [ 428.661325] ? signal_wake_up_state+0x85/0x120 [ 428.661341] ? zap_other_threads+0x2b9/0x3a0 [ 428.661356] ? __pfx_do_exit+0x10/0x10 [ 428.661369] ? do_group_exit+0x1c3/0x2a0 [ 428.661382] ? lock_release+0xc8/0x290 [ 428.661399] do_group_exit+0xd3/0x2a0 [ 428.661414] __x64_sys_exit_group+0x3e/0x50 [ 428.661427] x64_sys_call+0x18c5/0x18d0 [ 428.661442] do_syscall_64+0xbf/0x360 [ 428.661454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.661465] RIP: 0033:0x7f3fbfe04b19 [ 428.661474] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 428.661479] RSP: 002b:00007fffbbf614d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 428.661491] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f3fbfe04b19 [ 428.661498] RDX: 00007f3fbfdb772b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 428.661505] RBP: 0000000000000000 R08: 0000001b2cf245c8 R09: 0000000000000000 [ 428.661512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 428.661519] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffbbf615c0 [ 428.661534] [ 428.661538] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 428.661545] kmemleak: comm "syz-executor.2", pid 5799, jiffies 4295095514 [ 428.661552] kmemleak: min_count = 1 [ 428.661555] kmemleak: count = 0 [ 428.661559] kmemleak: flags = 0x21 [ 428.661563] kmemleak: checksum = 0 [ 428.661566] kmemleak: backtrace: [ 428.661570] pcpu_alloc_noprof+0x87a/0x1170 [ 428.661584] percpu_ref_init+0x37/0x400 [ 428.661602] io_uring_setup+0x44c/0x2000 [ 428.661613] __x64_sys_io_uring_setup+0xc8/0x170 [ 428.661624] do_syscall_64+0xbf/0x360 [ 428.661632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.691761] kmemleak: Found object by alias at 0x607f1a639264 [ 428.691777] CPU: 1 UID: 0 PID: 5796 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 428.691794] Tainted: [W]=WARN [ 428.691798] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 428.691804] Call Trace: [ 428.691808] [ 428.691812] dump_stack_lvl+0xca/0x120 [ 428.691836] __lookup_object+0x94/0xb0 [ 428.691852] delete_object_full+0x27/0x70 [ 428.691868] free_percpu+0x30/0x1160 [ 428.691884] ? arch_uprobe_clear_state+0x16/0x140 [ 428.691903] futex_hash_free+0x38/0xc0 [ 428.691917] mmput+0x2d3/0x390 [ 428.691935] do_exit+0x79d/0x2970 [ 428.691952] ? __pfx_do_exit+0x10/0x10 [ 428.691966] ? find_held_lock+0x2b/0x80 [ 428.691983] ? get_signal+0x835/0x2340 [ 428.692003] do_group_exit+0xd3/0x2a0 [ 428.692018] get_signal+0x2315/0x2340 [ 428.692035] ? put_task_stack+0xd2/0x240 [ 428.692049] ? __pfx_get_signal+0x10/0x10 [ 428.692065] ? __schedule+0xe91/0x3590 [ 428.692084] arch_do_signal_or_restart+0x80/0x790 [ 428.692102] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 428.692118] ? __x64_sys_futex+0x1c9/0x4d0 [ 428.692130] ? __x64_sys_futex+0x1d2/0x4d0 [ 428.692145] ? __pfx___x64_sys_futex+0x10/0x10 [ 428.692157] ? __pfx_fput_close_sync+0x10/0x10 [ 428.692172] ? dnotify_flush+0x79/0x4c0 [ 428.692183] ? xfd_validate_state+0x55/0x180 [ 428.692204] exit_to_user_mode_loop+0x8b/0x110 [ 428.692217] do_syscall_64+0x2f7/0x360 [ 428.692228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.692240] RIP: 0033:0x7faa71174b19 [ 428.692248] Code: Unable to access opcode bytes at 0x7faa71174aef. [ 428.692254] RSP: 002b:00007faa6e6ea218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 428.692264] RAX: 0000000000000001 RBX: 00007faa71287f68 RCX: 00007faa71174b19 [ 428.692272] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faa71287f6c [ 428.692279] RBP: 00007faa71287f60 R08: 0000000000000016 R09: 0000000000000000 [ 428.692286] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007faa71287f6c [ 428.692293] R13: 00007ffc73b4c26f R14: 00007faa6e6ea300 R15: 0000000000022000 [ 428.692308] [ 428.692312] kmemleak: Object (percpu) 0x607f1a639260 (size 8): [ 428.692318] kmemleak: comm "syz-executor.2", pid 5799, jiffies 4295095536 [ 428.692325] kmemleak: min_count = 1 [ 428.692328] kmemleak: count = 0 [ 428.692332] kmemleak: flags = 0x21 [ 428.692336] kmemleak: checksum = 0 [ 428.692339] kmemleak: backtrace: [ 428.692343] pcpu_alloc_noprof+0x87a/0x1170 [ 428.692357] percpu_ref_init+0x37/0x400 [ 428.692374] io_uring_setup+0x44c/0x2000 [ 428.692385] __x64_sys_io_uring_setup+0xc8/0x170 [ 428.692395] do_syscall_64+0xbf/0x360 [ 428.692403] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:11:08 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:08 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:08 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:18 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:18 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:11:18 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:18 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:11:18 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:11:18 executing program 4: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 15:11:18 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:18 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:18 executing program 4: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 15:11:18 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:18 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:11:18 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:18 executing program 4: syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 15:11:18 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:18 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:11:18 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:27 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:27 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:27 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:27 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:27 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:27 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:11:27 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:11:27 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:27 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:11:27 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:27 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:11:27 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:27 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:27 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:11:27 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:27 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:27 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:27 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) [ 447.320175] kmemleak: Found object by alias at 0x607f1a63969c [ 447.320194] CPU: 1 UID: 0 PID: 5918 Comm: iou-sqp-5917 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 447.320212] Tainted: [W]=WARN [ 447.320216] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 447.320223] Call Trace: [ 447.320227] [ 447.320232] dump_stack_lvl+0xca/0x120 [ 447.320259] __lookup_object+0x94/0xb0 [ 447.320276] delete_object_full+0x27/0x70 [ 447.320292] free_percpu+0x30/0x1160 [ 447.320308] ? arch_uprobe_clear_state+0x16/0x140 [ 447.320327] futex_hash_free+0x38/0xc0 [ 447.320342] mmput+0x2d3/0x390 [ 447.320360] do_exit+0x79d/0x2970 [ 447.320378] ? __pfx_do_exit+0x10/0x10 [ 447.320390] ? io_sq_thread+0xfbd/0x1b00 [ 447.320406] ? lock_release+0xc8/0x290 [ 447.320423] io_sq_thread+0xfc9/0x1b00 [ 447.320444] ? __pfx_io_sq_thread+0x10/0x10 [ 447.320460] ? __lock_acquire+0xc65/0x1b70 [ 447.320473] ? __pfx_autoremove_wake_function+0x10/0x10 [ 447.320488] ? __lock_acquire+0xc65/0x1b70 [ 447.320508] ? do_raw_spin_lock+0x123/0x260 [ 447.320524] ? find_held_lock+0x2b/0x80 [ 447.320540] ? __pfx_io_sq_thread+0x10/0x10 [ 447.320555] ? lock_release+0xc8/0x290 [ 447.320568] ? __pfx_io_sq_thread+0x10/0x10 [ 447.320583] ret_from_fork+0x34b/0x430 [ 447.320601] ? __pfx_io_sq_thread+0x10/0x10 [ 447.320620] ret_from_fork_asm+0x1a/0x30 [ 447.320644] [ 447.320647] kmemleak: Object (percpu) 0x607f1a639698 (size 8): [ 447.320654] kmemleak: comm "syz-executor.5", pid 5921, jiffies 4295114193 [ 447.320661] kmemleak: min_count = 1 [ 447.320665] kmemleak: count = 0 [ 447.320669] kmemleak: flags = 0x21 [ 447.320672] kmemleak: checksum = 0 [ 447.320676] kmemleak: backtrace: [ 447.320680] pcpu_alloc_noprof+0x87a/0x1170 [ 447.320694] percpu_ref_init+0x37/0x400 [ 447.320711] io_uring_setup+0x44c/0x2000 [ 447.320722] __x64_sys_io_uring_setup+0xc8/0x170 [ 447.320733] do_syscall_64+0xbf/0x360 [ 447.320743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.338463] kmemleak: Found object by alias at 0x607f1a63821c [ 447.338476] CPU: 1 UID: 0 PID: 5915 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 447.338492] Tainted: [W]=WARN [ 447.338496] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 447.338502] Call Trace: [ 447.338505] [ 447.338509] dump_stack_lvl+0xca/0x120 [ 447.338528] __lookup_object+0x94/0xb0 [ 447.338542] delete_object_full+0x27/0x70 [ 447.338558] free_percpu+0x30/0x1160 [ 447.338572] ? arch_uprobe_clear_state+0x16/0x140 [ 447.338591] futex_hash_free+0x38/0xc0 [ 447.338603] mmput+0x2d3/0x390 [ 447.338625] do_exit+0x79d/0x2970 [ 447.338642] ? __pfx_do_exit+0x10/0x10 [ 447.338656] ? find_held_lock+0x2b/0x80 [ 447.338673] ? get_signal+0x835/0x2340 [ 447.338693] do_group_exit+0xd3/0x2a0 [ 447.338708] get_signal+0x2315/0x2340 [ 447.338724] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 447.338737] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 447.338755] ? __pfx_get_signal+0x10/0x10 [ 447.338771] ? __schedule+0xe91/0x3590 [ 447.338791] arch_do_signal_or_restart+0x80/0x790 [ 447.338808] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 447.338825] ? __x64_sys_futex+0x1c9/0x4d0 [ 447.338837] ? __x64_sys_futex+0x1d2/0x4d0 [ 447.338852] ? __pfx___x64_sys_futex+0x10/0x10 [ 447.338864] ? __pfx_fput_close_sync+0x10/0x10 [ 447.338880] ? dnotify_flush+0x79/0x4c0 [ 447.338890] ? xfd_validate_state+0x55/0x180 [ 447.338911] exit_to_user_mode_loop+0x8b/0x110 [ 447.338923] do_syscall_64+0x2f7/0x360 [ 447.338934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.338945] RIP: 0033:0x7f3fbfe04b19 [ 447.338954] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 447.338959] RSP: 002b:00007f3fbd37a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 447.338970] RAX: 0000000000000001 RBX: 00007f3fbff17f68 RCX: 00007f3fbfe04b19 [ 447.338977] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3fbff17f6c [ 447.338984] RBP: 00007f3fbff17f60 R08: 0000000000000006 R09: 0000000000000000 [ 447.338991] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f3fbff17f6c [ 447.338998] R13: 00007fffbbf612af R14: 00007f3fbd37a300 R15: 0000000000022000 [ 447.339013] [ 447.339017] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 447.339023] kmemleak: comm "syz-executor.3", pid 5924, jiffies 4295114189 [ 447.339030] kmemleak: min_count = 1 [ 447.339034] kmemleak: count = 0 [ 447.339037] kmemleak: flags = 0x21 [ 447.339041] kmemleak: checksum = 0 [ 447.339044] kmemleak: backtrace: [ 447.339047] pcpu_alloc_noprof+0x87a/0x1170 [ 447.339062] percpu_ref_init+0x37/0x400 [ 447.339078] io_uring_setup+0x44c/0x2000 [ 447.339088] __x64_sys_io_uring_setup+0xc8/0x170 [ 447.339099] do_syscall_64+0xbf/0x360 [ 447.339107] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:11:27 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:11:27 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:11:37 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:11:37 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:11:37 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:37 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:37 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:37 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:37 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:11:37 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:37 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:37 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:37 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:37 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:37 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000100)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:11:37 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:37 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) 15:11:37 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:37 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:37 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:47 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:47 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800, 0xe6ae) 15:11:47 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000100)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:11:47 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:47 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:47 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x1) 15:11:47 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:47 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:11:47 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:47 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:47 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x1) 15:11:47 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000100)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:11:47 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:57 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:11:57 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:57 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:11:57 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:57 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x1) 15:11:57 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:57 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800, 0xe6ae) 15:11:57 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:11:57 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:57 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:57 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:11:57 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) socket(0x0, 0x800, 0xe6ae) 15:11:57 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 15:11:57 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:11:58 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) [ 477.886012] kmemleak: Found object by alias at 0x607f1a63821c [ 477.886036] CPU: 0 UID: 0 PID: 6069 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 477.886057] Tainted: [W]=WARN [ 477.886062] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 477.886070] Call Trace: [ 477.886075] [ 477.886080] dump_stack_lvl+0xca/0x120 [ 477.886109] __lookup_object+0x94/0xb0 [ 477.886128] delete_object_full+0x27/0x70 [ 477.886147] free_percpu+0x30/0x1160 [ 477.886166] ? arch_uprobe_clear_state+0x16/0x140 [ 477.886189] futex_hash_free+0x38/0xc0 [ 477.886205] mmput+0x2d3/0x390 [ 477.886227] do_exit+0x79d/0x2970 [ 477.886243] ? signal_wake_up_state+0x85/0x120 [ 477.886261] ? zap_other_threads+0x2b9/0x3a0 [ 477.886279] ? __pfx_do_exit+0x10/0x10 [ 477.886294] ? do_group_exit+0x1c3/0x2a0 [ 477.886310] ? lock_release+0xc8/0x290 [ 477.886330] do_group_exit+0xd3/0x2a0 [ 477.886347] __x64_sys_exit_group+0x3e/0x50 [ 477.886363] x64_sys_call+0x18c5/0x18d0 [ 477.886382] do_syscall_64+0xbf/0x360 [ 477.886395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.886408] RIP: 0033:0x7f3fbfe04b19 [ 477.886418] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 477.886424] RSP: 002b:00007fffbbf614d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 477.886438] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f3fbfe04b19 [ 477.886446] RDX: 00007f3fbfdb772b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 477.886455] RBP: 0000000000000000 R08: 0000001b2cf2379c R09: 0000000000000000 [ 477.886463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.886470] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffbbf615c0 [ 477.886489] [ 477.886493] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 477.886501] kmemleak: comm "syz-executor.6", pid 6081, jiffies 4295144744 [ 477.886509] kmemleak: min_count = 1 [ 477.886514] kmemleak: count = 0 [ 477.886518] kmemleak: flags = 0x21 [ 477.886522] kmemleak: checksum = 0 [ 477.886526] kmemleak: backtrace: [ 477.886530] pcpu_alloc_noprof+0x87a/0x1170 [ 477.886548] percpu_ref_init+0x37/0x400 [ 477.886569] io_uring_setup+0x44c/0x2000 [ 477.886583] __x64_sys_io_uring_setup+0xc8/0x170 [ 477.886595] do_syscall_64+0xbf/0x360 [ 477.886605] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:11:58 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:11:58 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:58 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:11:58 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:07 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:12:07 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:07 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:12:07 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 15:12:07 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:12:07 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x0, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:07 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:07 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800, 0xe6ae) 15:12:07 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x0, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:07 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 15:12:07 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:07 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:12:16 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r0) 15:12:16 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:16 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:12:16 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:16 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x0, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:16 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:12:16 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800, 0xe6ae) 15:12:16 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) 15:12:17 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:17 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) 15:12:17 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, 0x0}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:17 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) 15:12:17 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:12:17 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:17 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800, 0xe6ae) 15:12:17 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r0) 15:12:17 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) 15:12:17 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:17 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:12:26 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:26 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, 0x0}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:26 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r0) 15:12:26 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:12:26 executing program 6: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) 15:12:26 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, 0x0) 15:12:26 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x800, 0xe6ae) 15:12:26 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) [ 506.516005] kmemleak: Found object by alias at 0x607f1a63821c [ 506.516036] CPU: 1 UID: 0 PID: 6204 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 506.516068] Tainted: [W]=WARN [ 506.516075] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 506.516087] Call Trace: [ 506.516094] [ 506.516102] dump_stack_lvl+0xca/0x120 [ 506.516141] __lookup_object+0x94/0xb0 [ 506.516169] delete_object_full+0x27/0x70 [ 506.516198] free_percpu+0x30/0x1160 [ 506.516227] ? arch_uprobe_clear_state+0x16/0x140 [ 506.516263] futex_hash_free+0x38/0xc0 [ 506.516287] mmput+0x2d3/0x390 [ 506.516319] do_exit+0x79d/0x2970 [ 506.516343] ? signal_wake_up_state+0x85/0x120 [ 506.516371] ? zap_other_threads+0x2b9/0x3a0 [ 506.516414] ? __pfx_do_exit+0x10/0x10 [ 506.516437] ? do_group_exit+0x1c3/0x2a0 [ 506.516462] ? lock_release+0xc8/0x290 [ 506.516497] do_group_exit+0xd3/0x2a0 [ 506.516524] __x64_sys_exit_group+0x3e/0x50 [ 506.516549] x64_sys_call+0x18c5/0x18d0 [ 506.516576] do_syscall_64+0xbf/0x360 [ 506.516597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.516617] RIP: 0033:0x7f3fbfe04b19 [ 506.516632] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 506.516642] RSP: 002b:00007fffbbf614d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 506.516662] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f3fbfe04b19 [ 506.516675] RDX: 00007f3fbfdb772b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 506.516688] RBP: 0000000000000000 R08: 0000001b2cf22504 R09: 0000000000000000 [ 506.516700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.516712] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffbbf615c0 [ 506.516740] [ 506.516747] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 506.516759] kmemleak: comm "syz-executor.2", pid 6221, jiffies 4295173366 [ 506.516772] kmemleak: min_count = 1 [ 506.516778] kmemleak: count = 0 [ 506.516785] kmemleak: flags = 0x21 [ 506.516792] kmemleak: checksum = 0 [ 506.516798] kmemleak: backtrace: [ 506.516804] pcpu_alloc_noprof+0x87a/0x1170 [ 506.516831] percpu_ref_init+0x37/0x400 [ 506.516862] io_uring_setup+0x44c/0x2000 [ 506.516882] __x64_sys_io_uring_setup+0xc8/0x170 [ 506.516901] do_syscall_64+0xbf/0x360 [ 506.516917] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:12:26 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:26 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 15:12:26 executing program 6: openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) 15:12:36 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:12:36 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:36 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) 15:12:36 executing program 4: socket(0x0, 0x800, 0xe6ae) 15:12:36 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, 0x0}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:36 executing program 6: openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) 15:12:36 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, 0x0) 15:12:36 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:12:36 executing program 7: openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x40) 15:12:36 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:12:36 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:36 executing program 6: openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) 15:12:36 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:36 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, 0x0) 15:12:36 executing program 4: socket(0x0, 0x0, 0xe6ae) 15:12:36 executing program 7: openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x40) 15:12:36 executing program 6: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 15:12:36 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:46 executing program 3: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:12:46 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:46 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:46 executing program 6: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 15:12:46 executing program 4: socket(0x0, 0x0, 0x0) 15:12:46 executing program 7: openat$incfs(0xffffffffffffff9c, 0x0, 0x0, 0x40) 15:12:46 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:46 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:46 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) 15:12:46 executing program 6: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 15:12:46 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:46 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x31a, 0x0, r0}) 15:12:46 executing program 3: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:12:46 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:46 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:56 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:56 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:56 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:56 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r0) 15:12:56 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:56 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:56 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x31a, 0x0, r0}) 15:12:56 executing program 3: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) [ 536.429297] kmemleak: Found object by alias at 0x607f1a639264 [ 536.429330] CPU: 0 UID: 0 PID: 6337 Comm: iou-sqp-6335 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 536.429365] Tainted: [W]=WARN [ 536.429372] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 536.429384] Call Trace: [ 536.429391] [ 536.429400] dump_stack_lvl+0xca/0x120 [ 536.429440] __lookup_object+0x94/0xb0 [ 536.429469] delete_object_full+0x27/0x70 [ 536.429499] free_percpu+0x30/0x1160 [ 536.429527] ? arch_uprobe_clear_state+0x16/0x140 [ 536.429563] futex_hash_free+0x38/0xc0 [ 536.429588] mmput+0x2d3/0x390 [ 536.429629] do_exit+0x79d/0x2970 [ 536.429660] ? __pfx_do_exit+0x10/0x10 [ 536.429683] ? io_sq_thread+0xfbd/0x1b00 [ 536.429711] ? lock_release+0xc8/0x290 [ 536.429742] io_sq_thread+0xfc9/0x1b00 [ 536.429780] ? __pfx_io_sq_thread+0x10/0x10 [ 536.429811] ? __lock_acquire+0xc65/0x1b70 [ 536.429834] ? __pfx_autoremove_wake_function+0x10/0x10 [ 536.429862] ? __lock_acquire+0xc65/0x1b70 [ 536.429898] ? do_raw_spin_lock+0x123/0x260 [ 536.429927] ? find_held_lock+0x2b/0x80 [ 536.429957] ? __pfx_io_sq_thread+0x10/0x10 [ 536.429985] ? lock_release+0xc8/0x290 [ 536.430009] ? __pfx_io_sq_thread+0x10/0x10 [ 536.430038] ret_from_fork+0x34b/0x430 [ 536.430070] ? __pfx_io_sq_thread+0x10/0x10 [ 536.430097] ret_from_fork_asm+0x1a/0x30 [ 536.430139] [ 536.430146] kmemleak: Object (percpu) 0x607f1a639260 (size 8): [ 536.430158] kmemleak: comm "syz-executor.7", pid 6347, jiffies 4295203275 [ 536.430171] kmemleak: min_count = 1 [ 536.430178] kmemleak: count = 0 [ 536.430184] kmemleak: flags = 0x21 [ 536.430191] kmemleak: checksum = 0 [ 536.430198] kmemleak: backtrace: [ 536.430204] pcpu_alloc_noprof+0x87a/0x1170 [ 536.430231] percpu_ref_init+0x37/0x400 [ 536.430261] io_uring_setup+0x44c/0x2000 [ 536.430281] __x64_sys_io_uring_setup+0xc8/0x170 [ 536.430301] do_syscall_64+0xbf/0x360 [ 536.430317] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:12:56 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:12:56 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x31a, 0x0, r0}) 15:12:56 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:56 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:56 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:12:56 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:56 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r0) 15:12:56 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 15:12:56 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:12:56 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:12:56 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 15:12:56 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:13:05 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:13:05 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:13:05 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 15:13:05 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:05 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:05 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 15:13:05 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:13:05 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r0) 15:13:05 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, 0x0) 15:13:05 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:13:05 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:05 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 15:13:14 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r0) 15:13:14 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:13:14 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:14 executing program 6: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:13:14 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, 0x0) 15:13:14 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}) 15:13:14 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 15:13:14 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 15:13:14 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, 0x0) 15:13:14 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 15:13:14 executing program 6: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:13:14 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x20, 0x0, 0x31a}) 15:13:14 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:14 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:13:14 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:13:15 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 15:13:15 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:15 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 15:13:23 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:23 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:23 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 15:13:23 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x20, 0x0, 0x31a}) 15:13:23 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x20, 0x0, 0x31a, 0x0, r0}) 15:13:23 executing program 6: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:13:23 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:23 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:13:23 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 15:13:23 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x20, 0x0, 0x31a, 0x0, r0}) 15:13:23 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:23 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x20, 0x0, 0x31a}) 15:13:23 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r0) 15:13:23 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) 15:13:23 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:23 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:23 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:23 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:13:23 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:24 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) r0 = socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r0) [ 563.884565] kmemleak: Found object by alias at 0x607f1a63821c [ 563.884585] CPU: 0 UID: 0 PID: 6526 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 563.884603] Tainted: [W]=WARN [ 563.884611] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 563.884618] Call Trace: [ 563.884622] [ 563.884627] dump_stack_lvl+0xca/0x120 [ 563.884651] __lookup_object+0x94/0xb0 [ 563.884668] delete_object_full+0x27/0x70 [ 563.884684] free_percpu+0x30/0x1160 [ 563.884701] ? arch_uprobe_clear_state+0x16/0x140 [ 563.884721] futex_hash_free+0x38/0xc0 [ 563.884735] mmput+0x2d3/0x390 [ 563.884754] do_exit+0x79d/0x2970 [ 563.884772] ? __pfx_do_exit+0x10/0x10 [ 563.884786] ? find_held_lock+0x2b/0x80 [ 563.884804] ? get_signal+0x835/0x2340 [ 563.884824] do_group_exit+0xd3/0x2a0 [ 563.884839] get_signal+0x2315/0x2340 [ 563.884856] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 563.884873] ? __pfx_get_signal+0x10/0x10 [ 563.884889] ? __schedule+0xe91/0x3590 [ 563.884909] arch_do_signal_or_restart+0x80/0x790 [ 563.884927] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 563.884943] ? __x64_sys_futex+0x1c9/0x4d0 [ 563.884956] ? __x64_sys_futex+0x1d2/0x4d0 [ 563.884978] ? __pfx___x64_sys_futex+0x10/0x10 [ 563.884991] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 563.885004] ? xfd_validate_state+0x55/0x180 [ 563.885026] exit_to_user_mode_loop+0x8b/0x110 [ 563.885038] do_syscall_64+0x2f7/0x360 [ 563.885050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.885062] RIP: 0033:0x7f3fbfe04b19 [ 563.885071] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 563.885076] RSP: 002b:00007f3fbd37a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 563.885087] RAX: 0000000000000001 RBX: 00007f3fbff17f68 RCX: 00007f3fbfe04b19 [ 563.885094] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3fbff17f6c [ 563.885101] RBP: 00007f3fbff17f60 R08: 0000000000000006 R09: 0000000000000000 [ 563.885108] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f3fbff17f6c [ 563.885116] R13: 00007fffbbf612af R14: 00007f3fbd37a300 R15: 0000000000022000 [ 563.885131] [ 563.885135] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 563.885142] kmemleak: comm "syz-executor.3", pid 6536, jiffies 4295230752 [ 563.885149] kmemleak: min_count = 1 [ 563.885152] kmemleak: count = 0 [ 563.885156] kmemleak: flags = 0x21 [ 563.885160] kmemleak: checksum = 0 [ 563.885163] kmemleak: backtrace: [ 563.885167] pcpu_alloc_noprof+0x87a/0x1170 [ 563.885182] percpu_ref_init+0x37/0x400 [ 563.885200] io_uring_setup+0x44c/0x2000 [ 563.885211] __x64_sys_io_uring_setup+0xc8/0x170 [ 563.885221] do_syscall_64+0xbf/0x360 [ 563.885230] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:13:32 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) 15:13:32 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r0) 15:13:32 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x20, 0x0, 0x31a}) 15:13:32 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:13:32 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:32 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:13:32 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:32 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x20, 0x0, 0x31a, 0x0, r0}) 15:13:32 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:13:32 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:32 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:32 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:32 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) 15:13:32 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) 15:13:42 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 15:13:42 executing program 4: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r0) 15:13:42 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) 15:13:42 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:42 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:42 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) 15:13:42 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:42 executing program 6: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:13:42 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) [ 582.638971] kmemleak: Found object by alias at 0x607f1a63821c [ 582.639004] CPU: 0 UID: 0 PID: 6594 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 582.639037] Tainted: [W]=WARN [ 582.639043] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 582.639055] Call Trace: [ 582.639062] [ 582.639071] dump_stack_lvl+0xca/0x120 [ 582.639111] __lookup_object+0x94/0xb0 [ 582.639140] delete_object_full+0x27/0x70 [ 582.639168] free_percpu+0x30/0x1160 [ 582.639197] ? arch_uprobe_clear_state+0x16/0x140 [ 582.639232] futex_hash_free+0x38/0xc0 [ 582.639257] mmput+0x2d3/0x390 [ 582.639298] do_exit+0x79d/0x2970 [ 582.639322] ? signal_wake_up_state+0x85/0x120 [ 582.639350] ? zap_other_threads+0x2b9/0x3a0 [ 582.639379] ? __pfx_do_exit+0x10/0x10 [ 582.639402] ? do_group_exit+0x1c3/0x2a0 [ 582.639426] ? lock_release+0xc8/0x290 [ 582.639460] do_group_exit+0xd3/0x2a0 [ 582.639487] __x64_sys_exit_group+0x3e/0x50 [ 582.639512] x64_sys_call+0x18c5/0x18d0 [ 582.639539] do_syscall_64+0xbf/0x360 [ 582.639560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.639581] RIP: 0033:0x7f3fbfe04b19 [ 582.639597] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 582.639606] RSP: 002b:00007fffbbf614d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 582.639626] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f3fbfe04b19 [ 582.639640] RDX: 00007f3fbfdb772b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 582.639653] RBP: 0000000000000000 R08: 0000001b2cf21600 R09: 0000000000000000 [ 582.639665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.639678] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffbbf615c0 [ 582.639706] [ 582.639712] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 582.639725] kmemleak: comm "syz-executor.5", pid 6613, jiffies 4295249495 [ 582.639737] kmemleak: min_count = 1 [ 582.639744] kmemleak: count = 0 [ 582.639751] kmemleak: flags = 0x21 [ 582.639758] kmemleak: checksum = 0 [ 582.639764] kmemleak: backtrace: [ 582.639770] pcpu_alloc_noprof+0x87a/0x1170 [ 582.639797] percpu_ref_init+0x37/0x400 [ 582.639828] io_uring_setup+0x44c/0x2000 [ 582.639848] __x64_sys_io_uring_setup+0xc8/0x170 [ 582.639868] do_syscall_64+0xbf/0x360 [ 582.639883] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:13:52 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 15:13:52 executing program 4: r0 = socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, r0) 15:13:52 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:13:52 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:52 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:52 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:52 executing program 6: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:13:52 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) 15:13:52 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:52 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:52 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:52 executing program 6: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:13:52 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:52 executing program 7: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:52 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:13:52 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:52 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:13:52 executing program 4: socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 15:13:52 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x0, 0x0, r0}) 15:13:52 executing program 6: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 15:13:52 executing program 7: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:52 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:13:52 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 592.500445] kmemleak: Found object by alias at 0x607f1a63821c [ 592.500470] CPU: 1 UID: 0 PID: 6683 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 592.500489] Tainted: [W]=WARN [ 592.500492] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 592.500500] Call Trace: [ 592.500504] [ 592.500509] dump_stack_lvl+0xca/0x120 [ 592.500535] __lookup_object+0x94/0xb0 [ 592.500552] delete_object_full+0x27/0x70 [ 592.500568] free_percpu+0x30/0x1160 [ 592.500586] ? arch_uprobe_clear_state+0x16/0x140 [ 592.500611] futex_hash_free+0x38/0xc0 [ 592.500626] mmput+0x2d3/0x390 [ 592.500644] do_exit+0x79d/0x2970 [ 592.500662] ? __pfx_do_exit+0x10/0x10 [ 592.500676] ? find_held_lock+0x2b/0x80 [ 592.500693] ? get_signal+0x835/0x2340 [ 592.500713] do_group_exit+0xd3/0x2a0 [ 592.500728] get_signal+0x2315/0x2340 [ 592.500745] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 592.500761] ? __pfx_get_signal+0x10/0x10 [ 592.500777] ? __schedule+0xe91/0x3590 [ 592.500797] arch_do_signal_or_restart+0x80/0x790 [ 592.500815] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 592.500830] ? __x64_sys_futex+0x1c9/0x4d0 [ 592.500843] ? __x64_sys_futex+0x1d2/0x4d0 [ 592.500857] ? __pfx___x64_sys_futex+0x10/0x10 [ 592.500871] ? ksys_mmap_pgoff+0x85/0x520 [ 592.500890] exit_to_user_mode_loop+0x8b/0x110 [ 592.500902] do_syscall_64+0x2f7/0x360 [ 592.500914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.500927] RIP: 0033:0x7f3fbfe04b19 [ 592.500935] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 592.500941] RSP: 002b:00007f3fbd37a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 592.500952] RAX: 0000000000000001 RBX: 00007f3fbff17f68 RCX: 00007f3fbfe04b19 [ 592.500959] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3fbff17f6c [ 592.500966] RBP: 00007f3fbff17f60 R08: 0000000000000009 R09: 0000000000000000 [ 592.500973] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007f3fbff17f6c [ 592.500980] R13: 00007fffbbf612af R14: 00007f3fbd37a300 R15: 0000000000022000 [ 592.500996] [ 592.501000] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 592.501006] kmemleak: comm "syz-executor.2", pid 6681, jiffies 4295259374 [ 592.501014] kmemleak: min_count = 1 [ 592.501017] kmemleak: count = 0 [ 592.501021] kmemleak: flags = 0x21 [ 592.501025] kmemleak: checksum = 0 [ 592.501028] kmemleak: backtrace: [ 592.501032] pcpu_alloc_noprof+0x87a/0x1170 [ 592.501046] percpu_ref_init+0x37/0x400 [ 592.501064] io_uring_setup+0x44c/0x2000 [ 592.501075] __x64_sys_io_uring_setup+0xc8/0x170 [ 592.501086] do_syscall_64+0xbf/0x360 [ 592.501094] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:14:01 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x0, 0x0, r0}) 15:14:02 executing program 7: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:02 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) 15:14:02 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:02 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:02 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:02 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:02 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:02 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:02 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:02 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) 15:14:02 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:02 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x0, 0x0, r0}) 15:14:02 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) [ 602.153529] kmemleak: Found object by alias at 0x607f1a63821c [ 602.153558] CPU: 1 UID: 0 PID: 6715 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 602.153589] Tainted: [W]=WARN [ 602.153595] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 602.153613] Call Trace: [ 602.153619] [ 602.153627] dump_stack_lvl+0xca/0x120 [ 602.153665] __lookup_object+0x94/0xb0 [ 602.153691] delete_object_full+0x27/0x70 [ 602.153718] free_percpu+0x30/0x1160 [ 602.153744] ? arch_uprobe_clear_state+0x16/0x140 [ 602.153778] futex_hash_free+0x38/0xc0 [ 602.153801] mmput+0x2d3/0x390 [ 602.153832] do_exit+0x79d/0x2970 [ 602.153854] ? signal_wake_up_state+0x85/0x120 [ 602.153880] ? zap_other_threads+0x2b9/0x3a0 [ 602.153907] ? __pfx_do_exit+0x10/0x10 [ 602.153928] ? do_group_exit+0x1c3/0x2a0 [ 602.153951] ? lock_release+0xc8/0x290 [ 602.153979] do_group_exit+0xd3/0x2a0 [ 602.154004] __x64_sys_exit_group+0x3e/0x50 [ 602.154027] x64_sys_call+0x18c5/0x18d0 [ 602.154053] do_syscall_64+0xbf/0x360 [ 602.154073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.154092] RIP: 0033:0x7f3fbfe04b19 [ 602.154106] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 602.154115] RSP: 002b:00007fffbbf614d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 602.154134] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f3fbfe04b19 [ 602.154147] RDX: 00007f3fbfdb772b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 602.154159] RBP: 0000000000000000 R08: 0000001b2cf2001c R09: 0000000000000000 [ 602.154170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.154182] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffbbf615c0 [ 602.154208] [ 602.154214] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 602.154225] kmemleak: comm "syz-executor.2", pid 6724, jiffies 4295269014 [ 602.154237] kmemleak: min_count = 1 [ 602.154243] kmemleak: count = 0 [ 602.154249] kmemleak: flags = 0x21 [ 602.154256] kmemleak: checksum = 0 [ 602.154262] kmemleak: backtrace: [ 602.154268] pcpu_alloc_noprof+0x87a/0x1170 [ 602.154293] percpu_ref_init+0x37/0x400 [ 602.154322] io_uring_setup+0x44c/0x2000 [ 602.154341] __x64_sys_io_uring_setup+0xc8/0x170 [ 602.154359] do_syscall_64+0xbf/0x360 [ 602.154374] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:14:11 executing program 0: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:11 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:14:11 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) 15:14:11 executing program 6: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:11 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:11 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:11 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:11 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:11 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) 15:14:11 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:11 executing program 0: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:11 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:11 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:14:11 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:11 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:11 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:14:11 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) [ 611.816977] kmemleak: Found object by alias at 0x607f1a63821c [ 611.817008] CPU: 1 UID: 0 PID: 6764 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 611.817041] Tainted: [W]=WARN [ 611.817048] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 611.817060] Call Trace: [ 611.817066] [ 611.817075] dump_stack_lvl+0xca/0x120 [ 611.817113] __lookup_object+0x94/0xb0 [ 611.817142] delete_object_full+0x27/0x70 [ 611.817171] free_percpu+0x30/0x1160 [ 611.817199] ? arch_uprobe_clear_state+0x16/0x140 [ 611.817234] futex_hash_free+0x38/0xc0 [ 611.817258] mmput+0x2d3/0x390 [ 611.817291] do_exit+0x79d/0x2970 [ 611.817322] ? __pfx_do_exit+0x10/0x10 [ 611.817347] ? find_held_lock+0x2b/0x80 [ 611.817378] ? get_signal+0x835/0x2340 [ 611.817414] do_group_exit+0xd3/0x2a0 [ 611.817440] get_signal+0x2315/0x2340 [ 611.817484] ? put_task_stack+0xd2/0x240 [ 611.817510] ? __pfx_get_signal+0x10/0x10 [ 611.817539] ? __schedule+0xe91/0x3590 [ 611.817574] arch_do_signal_or_restart+0x80/0x790 [ 611.817605] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 611.817641] ? __x64_sys_futex+0x1c9/0x4d0 [ 611.817662] ? __x64_sys_futex+0x1d2/0x4d0 [ 611.817689] ? __pfx___x64_sys_futex+0x10/0x10 [ 611.817712] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 611.817744] exit_to_user_mode_loop+0x8b/0x110 [ 611.817767] do_syscall_64+0x2f7/0x360 [ 611.817788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.817809] RIP: 0033:0x7f3fbfe04b19 [ 611.817824] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 611.817834] RSP: 002b:00007f3fbd37a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 611.817854] RAX: 0000000000000001 RBX: 00007f3fbff17f68 RCX: 00007f3fbfe04b19 [ 611.817867] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3fbff17f6c [ 611.817880] RBP: 00007f3fbff17f60 R08: 000000000000000e R09: 0000000000000000 [ 611.817892] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f3fbff17f6c [ 611.817905] R13: 00007fffbbf612af R14: 00007f3fbd37a300 R15: 0000000000022000 [ 611.817933] [ 611.817940] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 611.817952] kmemleak: comm "syz-executor.2", pid 6773, jiffies 4295278689 [ 611.817965] kmemleak: min_count = 1 [ 611.817972] kmemleak: count = 0 [ 611.817978] kmemleak: flags = 0x21 [ 611.817985] kmemleak: checksum = 0 [ 611.817992] kmemleak: backtrace: [ 611.817997] pcpu_alloc_noprof+0x87a/0x1170 [ 611.818024] percpu_ref_init+0x37/0x400 [ 611.818055] io_uring_setup+0x44c/0x2000 [ 611.818075] __x64_sys_io_uring_setup+0xc8/0x170 [ 611.818094] do_syscall_64+0xbf/0x360 [ 611.818109] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:14:12 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:14:12 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:12 executing program 3: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:21 executing program 0: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:21 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:21 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:21 executing program 3: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:21 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) 15:14:21 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:14:21 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:14:21 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:21 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:21 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:21 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:21 executing program 3: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:21 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) 15:14:21 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:21 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:31 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:31 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) 15:14:31 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:31 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:31 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:31 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:31 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:31 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:14:31 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) 15:14:31 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:31 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:39 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:39 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:14:39 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:39 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:39 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:39 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:14:39 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a, 0x0, r0}) 15:14:39 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:39 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:39 executing program 6: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:39 executing program 4: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:14:39 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:14:39 executing program 1: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:39 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:14:39 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:39 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:39 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:40 executing program 6: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:40 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:40 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:14:48 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:14:48 executing program 6: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:48 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:14:48 executing program 1: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:48 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:48 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:14:48 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:48 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:48 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:48 executing program 1: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:48 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:48 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:14:58 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:58 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:14:58 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:14:58 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:58 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:14:58 executing program 6: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:58 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:14:58 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:58 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:14:58 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:14:58 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:14:58 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:14:58 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:14:58 executing program 6: socket$inet6_udp(0xa, 0x2, 0x0) 15:14:58 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:14:58 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:14:58 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, 0x0, 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:07 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:15:07 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:15:07 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:15:07 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:07 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:07 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:15:07 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:07 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:15:07 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:15:07 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:07 executing program 4: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:15:07 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:07 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:07 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:15:07 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:15:07 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 15:15:07 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:07 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:15:07 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) 15:15:15 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:15 executing program 4: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:15:15 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) fcntl$getown(0xffffffffffffffff, 0x9) 15:15:15 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:15:15 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:15:15 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:15:15 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:15 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:15:15 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:24 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:15:24 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:15:24 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:15:24 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:24 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:15:24 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:24 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 15:15:24 executing program 4: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:15:24 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:15:24 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:24 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) 15:15:24 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:15:24 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) fcntl$getown(0xffffffffffffffff, 0x9) 15:15:24 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:15:24 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:25 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:25 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:15:25 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:25 executing program 6: fcntl$getown(0xffffffffffffffff, 0x9) 15:15:25 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:15:25 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:25 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:25 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:15:25 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:15:25 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:15:33 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:33 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:15:33 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:33 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:33 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:15:33 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:15:33 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:33 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) [ 693.753390] kmemleak: Found object by alias at 0x607f1a639264 [ 693.753411] CPU: 1 UID: 0 PID: 7200 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 693.753429] Tainted: [W]=WARN [ 693.753433] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 693.753440] Call Trace: [ 693.753444] [ 693.753449] dump_stack_lvl+0xca/0x120 [ 693.753472] __lookup_object+0x94/0xb0 [ 693.753489] delete_object_full+0x27/0x70 [ 693.753505] free_percpu+0x30/0x1160 [ 693.753521] ? arch_uprobe_clear_state+0x16/0x140 [ 693.753540] futex_hash_free+0x38/0xc0 [ 693.753555] mmput+0x2d3/0x390 [ 693.753572] do_exit+0x79d/0x2970 [ 693.753585] ? lock_release+0xc8/0x290 [ 693.753607] ? __pfx_do_exit+0x10/0x10 [ 693.753620] ? find_held_lock+0x2b/0x80 [ 693.753636] ? get_signal+0x835/0x2340 [ 693.753656] do_group_exit+0xd3/0x2a0 [ 693.753670] get_signal+0x2315/0x2340 [ 693.753692] ? __pfx_get_signal+0x10/0x10 [ 693.753708] ? do_futex+0x135/0x370 [ 693.753721] ? __pfx_do_futex+0x10/0x10 [ 693.753736] arch_do_signal_or_restart+0x80/0x790 [ 693.753753] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 693.753769] ? __x64_sys_futex+0x1c9/0x4d0 [ 693.753781] ? __x64_sys_futex+0x1d2/0x4d0 [ 693.753795] ? __pfx___x64_sys_futex+0x10/0x10 [ 693.753807] ? __pfx_fput_close_sync+0x10/0x10 [ 693.753822] ? dnotify_flush+0x79/0x4c0 [ 693.753832] ? xfd_validate_state+0x55/0x180 [ 693.753853] exit_to_user_mode_loop+0x8b/0x110 [ 693.753865] do_syscall_64+0x2f7/0x360 [ 693.753876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.753888] RIP: 0033:0x7faa71174b19 [ 693.753897] Code: Unable to access opcode bytes at 0x7faa71174aef. [ 693.753902] RSP: 002b:00007faa6e6ea218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 693.753913] RAX: fffffffffffffe00 RBX: 00007faa71287f68 RCX: 00007faa71174b19 [ 693.753920] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa71287f68 [ 693.753927] RBP: 00007faa71287f60 R08: 0000000000000000 R09: 0000000000000000 [ 693.753934] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faa71287f6c [ 693.753940] R13: 00007ffc73b4c26f R14: 00007faa6e6ea300 R15: 0000000000022000 [ 693.753956] [ 693.753959] kmemleak: Object (percpu) 0x607f1a639260 (size 8): [ 693.753966] kmemleak: comm "syz-executor.2", pid 7209, jiffies 4295360626 [ 693.753972] kmemleak: min_count = 1 [ 693.753976] kmemleak: count = 0 [ 693.753980] kmemleak: flags = 0x21 [ 693.753983] kmemleak: checksum = 0 [ 693.753987] kmemleak: backtrace: [ 693.753990] pcpu_alloc_noprof+0x87a/0x1170 [ 693.754005] percpu_ref_init+0x37/0x400 [ 693.754022] io_uring_setup+0x44c/0x2000 [ 693.754033] __x64_sys_io_uring_setup+0xc8/0x170 [ 693.754044] do_syscall_64+0xbf/0x360 [ 693.754052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.779201] kmemleak: Found object by alias at 0x607f1a63821c [ 693.779214] CPU: 1 UID: 0 PID: 7194 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 693.779231] Tainted: [W]=WARN [ 693.779235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 693.779241] Call Trace: [ 693.779245] [ 693.779249] dump_stack_lvl+0xca/0x120 [ 693.779267] __lookup_object+0x94/0xb0 [ 693.779282] delete_object_full+0x27/0x70 [ 693.779298] free_percpu+0x30/0x1160 [ 693.779316] ? arch_uprobe_clear_state+0x16/0x140 [ 693.779335] futex_hash_free+0x38/0xc0 [ 693.779347] mmput+0x2d3/0x390 [ 693.779365] do_exit+0x79d/0x2970 [ 693.779378] ? signal_wake_up_state+0x85/0x120 [ 693.779393] ? zap_other_threads+0x2b9/0x3a0 [ 693.779409] ? __pfx_do_exit+0x10/0x10 [ 693.779421] ? do_group_exit+0x1c3/0x2a0 [ 693.779435] ? lock_release+0xc8/0x290 [ 693.779451] do_group_exit+0xd3/0x2a0 [ 693.779465] __x64_sys_exit_group+0x3e/0x50 [ 693.779479] x64_sys_call+0x18c5/0x18d0 [ 693.779493] do_syscall_64+0xbf/0x360 [ 693.779504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.779515] RIP: 0033:0x7f3fbfe04b19 [ 693.779523] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 693.779528] RSP: 002b:00007fffbbf614d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 693.779539] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f3fbfe04b19 [ 693.779546] RDX: 00007f3fbfdb772b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 693.779553] RBP: 0000000000000000 R08: 0000001b2cf2bab0 R09: 0000000000000000 [ 693.779560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.779566] R13: 0000000000000000 R14: 0000000000000001 R15: 00007fffbbf615c0 [ 693.779582] [ 693.779585] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 693.779592] kmemleak: comm "syz-executor.3", pid 7210, jiffies 4295360621 [ 693.779598] kmemleak: min_count = 1 [ 693.779602] kmemleak: count = 0 [ 693.779606] kmemleak: flags = 0x21 [ 693.779609] kmemleak: checksum = 0 [ 693.779613] kmemleak: backtrace: [ 693.779616] pcpu_alloc_noprof+0x87a/0x1170 [ 693.779630] percpu_ref_init+0x37/0x400 [ 693.779647] io_uring_setup+0x44c/0x2000 [ 693.779656] __x64_sys_io_uring_setup+0xc8/0x170 [ 693.779667] do_syscall_64+0xbf/0x360 [ 693.779676] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:15:33 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:33 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:15:34 executing program 5: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:34 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:15:34 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:34 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:42 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:42 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:15:42 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:15:42 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:15:42 executing program 1: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:15:42 executing program 3: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:15:42 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:42 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:15:42 executing program 1: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:15:42 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:15:42 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x0, 0x0, 0x31a}) 15:15:42 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:15:51 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:51 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:15:51 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:15:51 executing program 7: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:15:51 executing program 1: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:15:51 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:15:51 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, 0x0) 15:15:51 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) [ 711.374892] kmemleak: Found object by alias at 0x607f1a639264 [ 711.374913] CPU: 1 UID: 0 PID: 7286 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 711.374931] Tainted: [W]=WARN [ 711.374935] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.374942] Call Trace: [ 711.374946] [ 711.374951] dump_stack_lvl+0xca/0x120 [ 711.374979] __lookup_object+0x94/0xb0 [ 711.374996] delete_object_full+0x27/0x70 [ 711.375012] free_percpu+0x30/0x1160 [ 711.375029] ? arch_uprobe_clear_state+0x16/0x140 [ 711.375049] futex_hash_free+0x38/0xc0 [ 711.375063] mmput+0x2d3/0x390 [ 711.375081] do_exit+0x79d/0x2970 [ 711.375095] ? lock_release+0xc8/0x290 [ 711.375116] ? __pfx_do_exit+0x10/0x10 [ 711.375130] ? find_held_lock+0x2b/0x80 [ 711.375147] ? get_signal+0x835/0x2340 [ 711.375167] do_group_exit+0xd3/0x2a0 [ 711.375181] get_signal+0x2315/0x2340 [ 711.375204] ? __pfx_get_signal+0x10/0x10 [ 711.375219] ? do_futex+0x135/0x370 [ 711.375233] ? __pfx_do_futex+0x10/0x10 [ 711.375248] arch_do_signal_or_restart+0x80/0x790 [ 711.375265] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 711.375281] ? __x64_sys_futex+0x1c9/0x4d0 [ 711.375293] ? __x64_sys_futex+0x1d2/0x4d0 [ 711.375308] ? __pfx___x64_sys_futex+0x10/0x10 [ 711.375320] ? __pfx_fput_close_sync+0x10/0x10 [ 711.375335] ? dnotify_flush+0x79/0x4c0 [ 711.375347] ? xfd_validate_state+0x55/0x180 [ 711.375367] exit_to_user_mode_loop+0x8b/0x110 [ 711.375380] do_syscall_64+0x2f7/0x360 [ 711.375393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.375405] RIP: 0033:0x7faa71174b19 [ 711.375414] Code: Unable to access opcode bytes at 0x7faa71174aef. [ 711.375419] RSP: 002b:00007faa6e6ea218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 711.375430] RAX: fffffffffffffe00 RBX: 00007faa71287f68 RCX: 00007faa71174b19 [ 711.375438] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa71287f68 [ 711.375445] RBP: 00007faa71287f60 R08: 0000000000000000 R09: 0000000000000000 [ 711.375452] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faa71287f6c [ 711.375459] R13: 00007ffc73b4c26f R14: 00007faa6e6ea300 R15: 0000000000022000 [ 711.375475] [ 711.375479] kmemleak: Object (percpu) 0x607f1a639260 (size 8): [ 711.375485] kmemleak: comm "syz-executor.3", pid 7298, jiffies 4295378239 [ 711.375493] kmemleak: min_count = 1 [ 711.375496] kmemleak: count = 0 [ 711.375500] kmemleak: flags = 0x21 [ 711.375504] kmemleak: checksum = 0 [ 711.375507] kmemleak: backtrace: [ 711.375511] pcpu_alloc_noprof+0x87a/0x1170 [ 711.375525] percpu_ref_init+0x37/0x400 [ 711.375543] io_uring_setup+0x44c/0x2000 [ 711.375554] __x64_sys_io_uring_setup+0xc8/0x170 [ 711.375565] do_syscall_64+0xbf/0x360 [ 711.375573] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:15:51 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:15:51 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:15:51 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:15:51 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:15:51 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:51 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:15:51 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, 0x0) 15:15:51 executing program 7: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:15:51 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:15:51 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x0, 0x0) [ 711.658862] kmemleak: Found object by alias at 0x607f1a639264 [ 711.658881] CPU: 1 UID: 0 PID: 7322 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 711.658899] Tainted: [W]=WARN [ 711.658903] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 711.658911] Call Trace: [ 711.658915] [ 711.658920] dump_stack_lvl+0xca/0x120 [ 711.658947] __lookup_object+0x94/0xb0 [ 711.658965] delete_object_full+0x27/0x70 [ 711.658981] free_percpu+0x30/0x1160 [ 711.658997] ? arch_uprobe_clear_state+0x16/0x140 [ 711.659017] futex_hash_free+0x38/0xc0 [ 711.659031] mmput+0x2d3/0x390 [ 711.659050] do_exit+0x79d/0x2970 [ 711.659064] ? signal_wake_up_state+0x85/0x120 [ 711.659080] ? zap_other_threads+0x2b9/0x3a0 [ 711.659096] ? __pfx_do_exit+0x10/0x10 [ 711.659108] ? do_group_exit+0x1c3/0x2a0 [ 711.659121] ? lock_release+0xc8/0x290 [ 711.659138] do_group_exit+0xd3/0x2a0 [ 711.659153] __x64_sys_exit_group+0x3e/0x50 [ 711.659166] x64_sys_call+0x18c5/0x18d0 [ 711.659182] do_syscall_64+0xbf/0x360 [ 711.659194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.659205] RIP: 0033:0x7faa71174b19 [ 711.659214] Code: Unable to access opcode bytes at 0x7faa71174aef. [ 711.659220] RSP: 002b:00007ffc73b4c498 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 711.659231] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007faa71174b19 [ 711.659239] RDX: 00007faa7112772b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 711.659246] RBP: 0000000000000000 R08: 0000001b2cc21790 R09: 0000000000000000 [ 711.659253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.659260] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc73b4c580 [ 711.659276] [ 711.659280] kmemleak: Object (percpu) 0x607f1a639260 (size 8): [ 711.659287] kmemleak: comm "syz-executor.7", pid 7329, jiffies 4295378517 [ 711.659294] kmemleak: min_count = 1 [ 711.659298] kmemleak: count = 0 [ 711.659302] kmemleak: flags = 0x21 [ 711.659305] kmemleak: checksum = 0 [ 711.659309] kmemleak: backtrace: [ 711.659313] pcpu_alloc_noprof+0x87a/0x1170 [ 711.659327] percpu_ref_init+0x37/0x400 [ 711.659345] io_uring_setup+0x44c/0x2000 [ 711.659357] __x64_sys_io_uring_setup+0xc8/0x170 [ 711.659367] do_syscall_64+0xbf/0x360 [ 711.659376] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:16:01 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x0, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:16:01 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:01 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:16:01 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:01 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x0, 0x0) 15:16:01 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, 0x0) 15:16:01 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) io_uring_setup(0x0, 0x0) 15:16:01 executing program 7: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:01 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x31a}) 15:16:01 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) 15:16:01 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:16:01 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:01 executing program 7: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:01 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x0, 0x0) 15:16:01 executing program 5: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:01 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)) [ 721.663493] kmemleak: Found object by alias at 0x607f1a639264 [ 721.663513] CPU: 1 UID: 0 PID: 7377 Comm: iou-sqp-7374 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 721.663531] Tainted: [W]=WARN [ 721.663535] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 721.663543] Call Trace: [ 721.663547] [ 721.663552] dump_stack_lvl+0xca/0x120 [ 721.663581] __lookup_object+0x94/0xb0 [ 721.663603] delete_object_full+0x27/0x70 [ 721.663619] free_percpu+0x30/0x1160 [ 721.663637] ? arch_uprobe_clear_state+0x16/0x140 [ 721.663658] futex_hash_free+0x38/0xc0 [ 721.663673] mmput+0x2d3/0x390 [ 721.663692] do_exit+0x79d/0x2970 [ 721.663709] ? __pfx_do_exit+0x10/0x10 [ 721.663722] ? io_sq_thread+0xfbd/0x1b00 [ 721.663738] ? lock_release+0xc8/0x290 [ 721.663756] io_sq_thread+0xfc9/0x1b00 [ 721.663777] ? __pfx_io_sq_thread+0x10/0x10 [ 721.663794] ? __lock_acquire+0xc65/0x1b70 [ 721.663807] ? __pfx_autoremove_wake_function+0x10/0x10 [ 721.663822] ? __lock_acquire+0xc65/0x1b70 [ 721.663843] ? do_raw_spin_lock+0x123/0x260 [ 721.663859] ? find_held_lock+0x2b/0x80 [ 721.663875] ? __pfx_io_sq_thread+0x10/0x10 [ 721.663890] ? lock_release+0xc8/0x290 [ 721.663904] ? __pfx_io_sq_thread+0x10/0x10 [ 721.663919] ret_from_fork+0x34b/0x430 [ 721.663938] ? __pfx_io_sq_thread+0x10/0x10 [ 721.663953] ret_from_fork_asm+0x1a/0x30 [ 721.663977] [ 721.663981] kmemleak: Object (percpu) 0x607f1a639260 (size 8): [ 721.663988] kmemleak: comm "syz-executor.2", pid 7382, jiffies 4295388507 [ 721.663995] kmemleak: min_count = 1 [ 721.663999] kmemleak: count = 0 [ 721.664003] kmemleak: flags = 0x21 [ 721.664007] kmemleak: checksum = 0 [ 721.664010] kmemleak: backtrace: [ 721.664014] pcpu_alloc_noprof+0x87a/0x1170 [ 721.664029] percpu_ref_init+0x37/0x400 [ 721.664051] io_uring_setup+0x44c/0x2000 [ 721.664062] __x64_sys_io_uring_setup+0xc8/0x170 [ 721.664073] do_syscall_64+0xbf/0x360 [ 721.664083] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:16:18 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) 15:16:18 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:18 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:18 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x0, 0x0) 15:16:18 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:18 executing program 5: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:18 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:16:18 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:18 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:16:18 executing program 5: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:18 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:18 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:18 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:18 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:18 executing program 2: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:16:18 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:18 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:18 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:16:18 executing program 3: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:18 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:28 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:28 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:28 executing program 7: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:28 executing program 3: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:28 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:16:28 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:28 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:28 executing program 2: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:28 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:28 executing program 5: syz_open_dev$tty1(0xc, 0x4, 0x1) 15:16:28 executing program 7: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:38 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:38 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:38 executing program 7: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:38 executing program 2: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:38 executing program 3: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:38 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:16:38 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:38 executing program 5: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:16:38 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:38 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:38 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:38 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:38 executing program 7: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:38 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:38 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4000040) r0 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:16:38 executing program 5: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:16:38 executing program 2: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:38 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:38 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:48 executing program 2: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:48 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:48 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4000040) r0 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:16:48 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:48 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:48 executing program 4: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:48 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:48 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:56 executing program 1: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x4000040) r0 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r0) 15:16:56 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:56 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:56 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:56 executing program 4: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:56 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:56 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:56 executing program 2: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:56 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:56 executing program 2: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:56 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:56 executing program 4: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:56 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:56 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:56 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:16:56 executing program 2: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:56 executing program 1: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:56 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:16:56 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:56 executing program 6: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:56 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:56 executing program 0: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:56 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:16:56 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:16:56 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:16:56 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:16:56 executing program 6: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:16:56 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:16:56 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:16:56 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:04 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:17:04 executing program 2: syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:17:04 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:17:04 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x40) r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:17:04 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:04 executing program 0: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:04 executing program 6: ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:17:04 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:17:04 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) 15:17:04 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:17:04 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) [ 784.778470] kmemleak: Found object by alias at 0x607f1a63821c [ 784.778500] CPU: 0 UID: 0 PID: 7688 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 784.778535] Tainted: [W]=WARN [ 784.778542] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 784.778555] Call Trace: [ 784.778562] [ 784.778571] dump_stack_lvl+0xca/0x120 [ 784.778612] __lookup_object+0x94/0xb0 [ 784.778643] delete_object_full+0x27/0x70 [ 784.778673] free_percpu+0x30/0x1160 [ 784.778703] ? arch_uprobe_clear_state+0x16/0x140 [ 784.778740] futex_hash_free+0x38/0xc0 [ 784.778766] mmput+0x2d3/0x390 [ 784.778801] do_exit+0x79d/0x2970 [ 784.778834] ? __pfx_do_exit+0x10/0x10 [ 784.778861] ? find_held_lock+0x2b/0x80 [ 784.778894] ? get_signal+0x835/0x2340 [ 784.778932] do_group_exit+0xd3/0x2a0 [ 784.778960] get_signal+0x2315/0x2340 [ 784.778994] ? put_task_stack+0xd2/0x240 [ 784.779022] ? __pfx_get_signal+0x10/0x10 [ 784.779054] ? __schedule+0xe91/0x3590 [ 784.779091] arch_do_signal_or_restart+0x80/0x790 [ 784.779124] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 784.779155] ? __x64_sys_futex+0x1c9/0x4d0 [ 784.779179] ? __x64_sys_futex+0x1d2/0x4d0 [ 784.779208] ? __pfx___x64_sys_futex+0x10/0x10 [ 784.779232] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 784.779266] exit_to_user_mode_loop+0x8b/0x110 [ 784.779290] do_syscall_64+0x2f7/0x360 [ 784.779313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.779335] RIP: 0033:0x7f3fbfe04b19 [ 784.779352] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 784.779361] RSP: 002b:00007f3fbd37a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 784.779383] RAX: 0000000000000001 RBX: 00007f3fbff17f68 RCX: 00007f3fbfe04b19 [ 784.779397] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3fbff17f6c [ 784.779411] RBP: 00007f3fbff17f60 R08: 000000000000000e R09: 0000000000000000 [ 784.779424] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f3fbff17f6c [ 784.779451] R13: 00007fffbbf612af R14: 00007f3fbd37a300 R15: 0000000000022000 [ 784.779497] [ 784.779506] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 784.779523] kmemleak: comm "cron", pid 7665, jiffies 4295448528 [ 784.779541] kmemleak: min_count = 1 [ 784.779550] kmemleak: count = 1 [ 784.779560] kmemleak: flags = 0x21 [ 784.779569] kmemleak: checksum = 0 [ 784.779577] kmemleak: backtrace: [ 784.779583] pcpu_alloc_noprof+0x87a/0x1170 [ 784.779612] percpu_ref_init+0x37/0x400 [ 784.779645] wb_get_create+0x25b/0x1120 [ 784.779664] __inode_attach_wb+0x2e2/0xc70 [ 784.779687] __mark_inode_dirty+0xae3/0xd00 [ 784.779710] d_tmpfile+0x50/0x80 [ 784.779732] ext4_tmpfile+0x291/0x4c0 [ 784.779755] vfs_tmpfile+0x2c6/0x8a0 [ 784.779773] path_openat+0x14bc/0x2880 [ 784.779792] do_filp_open+0x1e8/0x450 [ 784.779811] do_sys_openat2+0x104/0x1b0 [ 784.779839] __x64_sys_openat+0x142/0x200 [ 784.779867] do_syscall_64+0xbf/0x360 [ 784.779884] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:17:05 executing program 5: openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) 15:17:05 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:17:05 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:17:05 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 15:17:05 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:17:05 executing program 6: sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, 0x0) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 15:17:13 executing program 2: syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 15:17:13 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:17:13 executing program 0: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:13 executing program 5: openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) 15:17:13 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:17:13 executing program 3: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:17:13 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:17:13 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:17:13 executing program 5: openat$vcs(0xffffffffffffff9c, 0x0, 0x80400, 0x0) 15:17:13 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:17:13 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 15:17:13 executing program 3: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:17:13 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:17:13 executing program 2: syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 15:17:13 executing program 7: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:17:13 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:17:22 executing program 1: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:17:22 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:17:22 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:17:22 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:17:22 executing program 4: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:17:22 executing program 2: syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) 15:17:22 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:22 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:17:22 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:17:22 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:17:22 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:22 executing program 4: openat$incfs(0xffffffffffffff9c, 0x0, 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:17:22 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:17:33 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:33 executing program 6: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) r3 = socket(0x15, 0x800, 0xe6ae) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r3) 15:17:33 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:17:33 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:17:33 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:17:33 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:17:33 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) 15:17:33 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:17:33 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:33 executing program 3: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:33 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:17:41 executing program 7: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:17:41 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:41 executing program 6: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:41 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:17:41 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:17:41 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:17:41 executing program 3: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:41 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:41 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:41 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:41 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:17:41 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:17:41 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:17:41 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:17:41 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r0}) 15:17:41 executing program 5: syz_io_uring_setup(0x4006, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:51 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:51 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:17:51 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:17:51 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:17:51 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:51 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:17:51 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) 15:17:51 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:17:51 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:17:51 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:17:51 executing program 3: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) [ 831.220495] kmemleak: Found object by alias at 0x607f1a639264 [ 831.220515] CPU: 0 UID: 0 PID: 7907 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 831.220537] Tainted: [W]=WARN [ 831.220541] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 831.220549] Call Trace: [ 831.220552] [ 831.220557] dump_stack_lvl+0xca/0x120 [ 831.220582] __lookup_object+0x94/0xb0 [ 831.220600] delete_object_full+0x27/0x70 [ 831.220616] free_percpu+0x30/0x1160 [ 831.220633] ? arch_uprobe_clear_state+0x16/0x140 [ 831.220653] futex_hash_free+0x38/0xc0 [ 831.220668] mmput+0x2d3/0x390 [ 831.220687] do_exit+0x79d/0x2970 [ 831.220705] ? __pfx_do_exit+0x10/0x10 [ 831.220719] ? find_held_lock+0x2b/0x80 [ 831.220737] ? get_signal+0x835/0x2340 [ 831.220758] do_group_exit+0xd3/0x2a0 [ 831.220773] get_signal+0x2315/0x2340 [ 831.220790] ? put_task_stack+0xd2/0x240 [ 831.220804] ? __pfx_get_signal+0x10/0x10 [ 831.220820] ? __schedule+0xe91/0x3590 [ 831.220841] arch_do_signal_or_restart+0x80/0x790 [ 831.220859] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 831.220875] ? __x64_sys_futex+0x1c9/0x4d0 [ 831.220888] ? __x64_sys_futex+0x1d2/0x4d0 [ 831.220902] ? __pfx___x64_sys_futex+0x10/0x10 [ 831.220915] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 831.220934] exit_to_user_mode_loop+0x8b/0x110 [ 831.220947] do_syscall_64+0x2f7/0x360 [ 831.220959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.220971] RIP: 0033:0x7faa71174b19 [ 831.220980] Code: Unable to access opcode bytes at 0x7faa71174aef. [ 831.220985] RSP: 002b:00007faa6e6ea218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 831.220998] RAX: 0000000000000001 RBX: 00007faa71287f68 RCX: 00007faa71174b19 [ 831.221007] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faa71287f6c [ 831.221016] RBP: 00007faa71287f60 R08: 000000000000000e R09: 0000000000000000 [ 831.221023] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007faa71287f6c [ 831.221031] R13: 00007ffc73b4c26f R14: 00007faa6e6ea300 R15: 0000000000022000 [ 831.221046] [ 831.221050] kmemleak: Object (percpu) 0x607f1a639260 (size 8): [ 831.221057] kmemleak: comm "syz-executor.1", pid 7911, jiffies 4295498079 [ 831.221064] kmemleak: min_count = 1 [ 831.221068] kmemleak: count = 0 [ 831.221071] kmemleak: flags = 0x21 [ 831.221075] kmemleak: checksum = 0 [ 831.221078] kmemleak: backtrace: [ 831.221082] pcpu_alloc_noprof+0x87a/0x1170 [ 831.221097] percpu_ref_init+0x37/0x400 [ 831.221115] io_uring_setup+0x44c/0x2000 [ 831.221126] __x64_sys_io_uring_setup+0xc8/0x170 [ 831.221137] do_syscall_64+0xbf/0x360 [ 831.221145] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:17:51 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:00 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:18:00 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:00 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:18:00 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:00 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:00 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:00 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:00 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:00 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:00 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:00 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) [ 840.300238] kmemleak: Found object by alias at 0x607f1a639264 [ 840.300269] CPU: 0 UID: 0 PID: 7932 Comm: syz-executor.5 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 840.300302] Tainted: [W]=WARN [ 840.300309] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 840.300321] Call Trace: [ 840.300327] [ 840.300336] dump_stack_lvl+0xca/0x120 [ 840.300375] __lookup_object+0x94/0xb0 [ 840.300403] delete_object_full+0x27/0x70 [ 840.300438] free_percpu+0x30/0x1160 [ 840.300466] ? arch_uprobe_clear_state+0x16/0x140 [ 840.300501] futex_hash_free+0x38/0xc0 [ 840.300526] mmput+0x2d3/0x390 [ 840.300558] do_exit+0x79d/0x2970 [ 840.300582] ? lock_release+0xc8/0x290 [ 840.300612] ? __pfx_do_exit+0x10/0x10 [ 840.300637] ? find_held_lock+0x2b/0x80 [ 840.300668] ? get_signal+0x835/0x2340 [ 840.300703] do_group_exit+0xd3/0x2a0 [ 840.300729] get_signal+0x2315/0x2340 [ 840.300761] ? __pfx_signal_setup_done+0x10/0x10 [ 840.300799] ? __pfx_get_signal+0x10/0x10 [ 840.300828] ? do_futex+0x135/0x370 [ 840.300853] ? __pfx_do_futex+0x10/0x10 [ 840.300874] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 840.300899] arch_do_signal_or_restart+0x80/0x790 [ 840.300930] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 840.300960] ? __x64_sys_futex+0x1c9/0x4d0 [ 840.300982] ? __x64_sys_futex+0x1d2/0x4d0 [ 840.301009] ? __pfx___x64_sys_futex+0x10/0x10 [ 840.301031] ? lock_mm_and_find_vma+0xaa/0x6f0 [ 840.301064] exit_to_user_mode_loop+0x8b/0x110 [ 840.301086] do_syscall_64+0x2f7/0x360 [ 840.301107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.301131] RIP: 0033:0x7faa71174b19 [ 840.301147] Code: Unable to access opcode bytes at 0x7faa71174aef. [ 840.301156] RSP: 002b:00007faa6e6ea218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 840.301176] RAX: fffffffffffffe00 RBX: 00007faa71287f68 RCX: 00007faa71174b19 [ 840.301190] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007faa71287f68 [ 840.301203] RBP: 00007faa71287f60 R08: 0000000000000000 R09: 0000000000000000 [ 840.301215] R10: 0000000000000000 R11: 0000000000000246 R12: 00007faa71287f6c [ 840.301228] R13: 00007ffc73b4c26f R14: 00007faa6e6ea300 R15: 0000000000022000 [ 840.301257] [ 840.301264] kmemleak: Object (percpu) 0x607f1a639260 (size 8): [ 840.301276] kmemleak: comm "syz-executor.3", pid 7951, jiffies 4295507156 [ 840.301288] kmemleak: min_count = 1 [ 840.301295] kmemleak: count = 0 [ 840.301302] kmemleak: flags = 0x21 [ 840.301308] kmemleak: checksum = 0 [ 840.301315] kmemleak: backtrace: [ 840.301321] pcpu_alloc_noprof+0x87a/0x1170 [ 840.301348] percpu_ref_init+0x37/0x400 [ 840.301379] io_uring_setup+0x44c/0x2000 [ 840.301399] __x64_sys_io_uring_setup+0xc8/0x170 [ 840.301419] do_syscall_64+0xbf/0x360 [ 840.301434] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:18:00 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:00 executing program 2: r0 = syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:18:00 executing program 5: syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0) 15:18:00 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) 15:18:00 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:00 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 15:18:00 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) 15:18:09 executing program 2: r0 = syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:18:09 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:09 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:09 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 15:18:09 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:09 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:09 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:18:09 executing program 7: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:18:09 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:18:09 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 15:18:09 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:09 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:09 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:09 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 15:18:09 executing program 2: r0 = syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:18:09 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r1, 0x9) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:18 executing program 2: syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 15:18:18 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 15:18:18 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:18 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) 15:18:18 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, &(0x7f0000000240)) 15:18:18 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) syz_open_dev$tty1(0xc, 0x4, 0x2) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:18 executing program 7: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:18 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) [ 857.973132] kmemleak: Found object by alias at 0x607f1a63821c [ 857.973152] CPU: 0 UID: 0 PID: 8043 Comm: iou-sqp-8042 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 857.973171] Tainted: [W]=WARN [ 857.973175] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 857.973182] Call Trace: [ 857.973186] [ 857.973191] dump_stack_lvl+0xca/0x120 [ 857.973219] __lookup_object+0x94/0xb0 [ 857.973237] delete_object_full+0x27/0x70 [ 857.973253] free_percpu+0x30/0x1160 [ 857.973269] ? arch_uprobe_clear_state+0x16/0x140 [ 857.973289] futex_hash_free+0x38/0xc0 [ 857.973304] mmput+0x2d3/0x390 [ 857.973323] do_exit+0x79d/0x2970 [ 857.973341] ? __pfx_do_exit+0x10/0x10 [ 857.973352] ? io_sq_thread+0xfbd/0x1b00 [ 857.973368] ? lock_release+0xc8/0x290 [ 857.973386] io_sq_thread+0xfc9/0x1b00 [ 857.973407] ? __pfx_io_sq_thread+0x10/0x10 [ 857.973423] ? __lock_acquire+0xc65/0x1b70 [ 857.973436] ? __pfx_autoremove_wake_function+0x10/0x10 [ 857.973452] ? __lock_acquire+0xc65/0x1b70 [ 857.973472] ? do_raw_spin_lock+0x123/0x260 [ 857.973487] ? find_held_lock+0x2b/0x80 [ 857.973503] ? __pfx_io_sq_thread+0x10/0x10 [ 857.973518] ? lock_release+0xc8/0x290 [ 857.973531] ? __pfx_io_sq_thread+0x10/0x10 [ 857.973547] ret_from_fork+0x34b/0x430 [ 857.973565] ? __pfx_io_sq_thread+0x10/0x10 [ 857.973579] ret_from_fork_asm+0x1a/0x30 [ 857.973606] [ 857.973610] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 857.973617] kmemleak: comm "syz-executor.1", pid 8053, jiffies 4295524843 [ 857.973624] kmemleak: min_count = 1 [ 857.973628] kmemleak: count = 0 [ 857.973632] kmemleak: flags = 0x21 [ 857.973636] kmemleak: checksum = 0 [ 857.973639] kmemleak: backtrace: [ 857.973643] pcpu_alloc_noprof+0x87a/0x1170 [ 857.973658] percpu_ref_init+0x37/0x400 [ 857.973675] io_uring_setup+0x44c/0x2000 [ 857.973686] __x64_sys_io_uring_setup+0xc8/0x170 [ 857.973696] do_syscall_64+0xbf/0x360 [ 857.973706] entry_SYSCALL_64_after_hwframe+0x77/0x7f 15:18:18 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 15:18:18 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:18 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 15:18:18 executing program 2: syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, 0x0) 15:18:18 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:18:18 executing program 5: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 15:18:18 executing program 3: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 15:18:18 executing program 6: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:18 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:18 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 15:18:18 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:18:18 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:18:18 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 15:18:18 executing program 6: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:28 executing program 2: syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) 15:18:28 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 15:18:28 executing program 1: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:18:28 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 15:18:28 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 15:18:28 executing program 6: io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:28 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:18:28 executing program 0: syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x3, 0xc8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), 0x0) 15:18:28 executing program 2: openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) 15:18:38 executing program 7: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 15:18:38 executing program 2: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:18:38 executing program 0: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:38 executing program 4: openat$ptmx(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0) 15:18:38 executing program 5: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:18:38 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 15:18:38 executing program 6: io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:38 executing program 1: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:18:38 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:18:38 executing program 7: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:18:38 executing program 6: io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:38 executing program 1: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000fc0), r0) 15:18:38 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) 15:18:38 executing program 2: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:18:38 executing program 6: io_uring_setup(0x0, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a}) 15:18:38 executing program 7: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:18:38 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:18:38 executing program 0: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:18:48 executing program 2: openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:18:48 executing program 1: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r0 = syz_io_uring_complete(0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r1) 15:18:48 executing program 0: setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)=0x1, 0x4) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x2000c000) syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), 0xffffffffffffffff) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000001980)={{0x1, 0x1, 0x18}, './file0\x00'}) 15:18:48 executing program 4: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:18:48 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 15:18:48 executing program 6: io_uring_setup(0x4af7, 0x0) 15:18:48 executing program 7: openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) 15:18:48 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:18:48 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:18:48 executing program 1: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r0 = syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000b40)={'ip6_vti0\x00', &(0x7f0000000ac0)={'syztnl2\x00', 0x0, 0x29, 0x2, 0x20, 0x2f6c, 0x41, @private0, @private0, 0x1, 0x80, 0xae3e, 0x1}}) 15:18:48 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 15:18:48 executing program 6: io_uring_setup(0x4af7, 0x0) 15:18:48 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 15:18:48 executing program 7: sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004884}, 0x4) syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0xd00, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40d0}, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x2f, 0xa1, 0x6, 0x5, 0x40, @remote, @loopback, 0x8000, 0x20, 0x2}}) accept(0xffffffffffffffff, &(0x7f0000000440)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000004c0)=0x80) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x98, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffffff05, 0x60}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x98}, 0x1, 0x0, 0x0, 0x84}, 0x50) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), 0xffffffffffffffff) 15:18:48 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r2, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:48 executing program 2: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@l2tp={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x80, 0x80800) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x6c}}, 0x40010) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4000800) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @nl=@kern={0x10, 0x0, 0x0, 0x20000000}, @sco={0x1f, @none}, @qipcrtr={0x2a, 0x0, 0x1}, 0x68, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000380)='veth0_to_bridge\x00', 0x3, 0x800}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000f80)='/proc/cgroups\x00', 0x0, 0x0) 15:18:48 executing program 6: io_uring_setup(0x4af7, 0x0) 15:18:48 executing program 5: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) [ 892.545924] ------------[ cut here ]------------ [ 892.547089] WARNING: io_uring/io_uring.c:3040 at io_ring_exit_work+0xc86/0xf60, CPU#1: kworker/u9:4/327 [ 892.548926] Modules linked in: [ 892.549650] CPU: 1 UID: 0 PID: 327 Comm: kworker/u9:4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 892.551828] Tainted: [W]=WARN [ 892.552416] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 892.553976] Workqueue: iou_exit io_ring_exit_work [ 892.554923] RIP: 0010:io_ring_exit_work+0xc86/0xf60 [ 892.555883] Code: 65 48 2b 05 e4 fc 3d 05 0f 85 55 01 00 00 48 81 c4 40 01 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c0 d3 77 02 e8 3b b4 2d ff 90 <0f> 0b 90 48 c7 44 24 08 60 ea 00 00 e9 13 f7 ff ff e8 24 b4 2d ff [ 892.564738] RSP: 0018:ffff88801722fb08 EFLAGS: 00010293 [ 892.565798] RAX: 0000000000000000 RBX: ffff8880163426c8 RCX: ffffffff82462a61 [ 892.567152] RDX: ffff88800ebfd280 RSI: ffffffff82463345 RDI: 0000000000000007 [ 892.568504] RBP: ffff888016342000 R08: 0000000000000001 R09: ffffed1002e45f4a [ 892.569866] R10: ffffffffffffffde R11: 0000000000000000 R12: dffffc0000000000 [ 892.571214] R13: ffffffffffffffde R14: ffff88801634203f R15: ffff888016342040 [ 892.572553] FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 892.574072] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 892.575175] CR2: 000055de7abc8500 CR3: 000000002031c000 CR4: 0000000000350ef0 [ 892.576523] Call Trace: [ 892.577062] [ 892.577510] ? __pfx_io_ring_exit_work+0x10/0x10 [ 892.578429] ? finish_task_switch.isra.0+0x201/0x840 [ 892.579433] ? lock_acquire+0x15e/0x2f0 [ 892.580217] ? process_one_work+0x857/0x19c0 [ 892.581100] ? lock_release+0xc8/0x290 [ 892.581872] process_one_work+0x8e1/0x19c0 [ 892.582716] ? __pfx_process_one_work+0x10/0x10 [ 892.583590] ? move_linked_works+0x172/0x270 [ 892.584462] ? assign_work+0x196/0x240 [ 892.585240] worker_thread+0x67e/0xe90 [ 892.586004] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 892.587017] ? __pfx_worker_thread+0x10/0x10 [ 892.587889] kthread+0x3c8/0x740 [ 892.588536] ? __pfx_kthread+0x10/0x10 [ 892.589307] ? ret_from_fork+0x23/0x430 [ 892.590100] ? lock_release+0xc8/0x290 [ 892.590861] ? __pfx_kthread+0x10/0x10 [ 892.591624] ret_from_fork+0x34b/0x430 [ 892.592359] ? __pfx_kthread+0x10/0x10 [ 892.593127] ret_from_fork_asm+0x1a/0x30 [ 892.593939] [ 892.594376] irq event stamp: 566939 [ 892.595087] hardirqs last enabled at (566959): [] __up_console_sem+0x78/0x80 [ 892.596689] hardirqs last disabled at (566968): [] __up_console_sem+0x5d/0x80 [ 892.598302] softirqs last enabled at (566956): [] handle_softirqs+0x50c/0x770 [ 892.599941] softirqs last disabled at (566947): [] __irq_exit_rcu+0xc4/0x100 [ 892.601550] ---[ end trace 0000000000000000 ]--- 15:18:57 executing program 3: openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 15:18:57 executing program 1: sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_SSID={0xd, 0x34, @random="73fcee13df84532b45"}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) syz_io_uring_complete(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000008c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) 15:18:57 executing program 5: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:57 executing program 7: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:18:57 executing program 2: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:57 executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f0000002800), 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000003140), 0xffffffffffffffff) 15:18:57 executing program 6: io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x20, 0x0, 0x31a}) 15:18:57 executing program 0: openat$autofs(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) 15:18:57 executing program 4: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x80, 0x40) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/8, 0x8, 0x1, &(0x7f0000000080)=""/7, 0x7}, &(0x7f0000000100)=0x40) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x80400, 0x0) syz_io_uring_setup(0x4006, &(0x7f0000000180)={0x0, 0xae31, 0x2, 0x3, 0xc8, 0x0, r1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) fcntl$getown(r3, 0x9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r2, 0x89f5, &(0x7f0000000380)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0xec, 0x0, 0x81, 0x2, @mcast2, @mcast1, 0x700, 0xff88, 0x8000, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x7, 0x19, 0x20, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x7, 0x5, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r4, 0x89f4, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'sit0\x00', 0x0, 0x0, 0x7, 0x0, 0x5, 0x2, @remote, @private0, 0x7, 0x8, 0xc78, 0x200}}) accept$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) syz_genetlink_get_family_id$ethtool(&(0x7f00000009c0), 0xffffffffffffffff) io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x7738, 0x20, 0x0, 0x31a, 0x0, r1}) 15:18:57 executing program 6: io_uring_setup(0x4af7, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x31a}) [ 897.596159] kmemleak: Found object by alias at 0x607f1a63821c [ 897.596177] CPU: 1 UID: 0 PID: 8221 Comm: syz-executor.0 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 897.596195] Tainted: [W]=WARN [ 897.596199] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 897.596206] Call Trace: [ 897.596210] [ 897.596214] dump_stack_lvl+0xca/0x120 [ 897.596238] __lookup_object+0x94/0xb0 [ 897.596255] delete_object_full+0x27/0x70 [ 897.596270] free_percpu+0x30/0x1160 [ 897.596286] ? arch_uprobe_clear_state+0x16/0x140 [ 897.596306] futex_hash_free+0x38/0xc0 [ 897.596320] mmput+0x2d3/0x390 [ 897.596338] do_exit+0x79d/0x2970 [ 897.596351] ? lock_release+0xc8/0x290 [ 897.596368] ? __pfx_do_exit+0x10/0x10 [ 897.596381] ? find_held_lock+0x2b/0x80 [ 897.596398] ? get_signal+0x835/0x2340 [ 897.596417] do_group_exit+0xd3/0x2a0 [ 897.596432] get_signal+0x2315/0x2340 [ 897.596454] ? __pfx_get_signal+0x10/0x10 [ 897.596469] ? do_futex+0x135/0x370 [ 897.596482] ? __pfx_do_futex+0x10/0x10 [ 897.596494] ? lock_acquire+0x15e/0x2f0 [ 897.596509] arch_do_signal_or_restart+0x80/0x790 [ 897.596526] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 897.596541] ? __x64_sys_futex+0x1c9/0x4d0 [ 897.596553] ? __x64_sys_futex+0x1d2/0x4d0 [ 897.596566] ? __fget_files+0x20d/0x3b0 [ 897.596578] ? __pfx___x64_sys_futex+0x10/0x10 [ 897.596598] ? fdget+0x197/0x220 [ 897.596609] exit_to_user_mode_loop+0x8b/0x110 [ 897.596622] do_syscall_64+0x2f7/0x360 [ 897.596634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.596646] RIP: 0033:0x7f3fbfe04b19 [ 897.596654] Code: Unable to access opcode bytes at 0x7f3fbfe04aef. [ 897.596659] RSP: 002b:00007f3fbd37a218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 897.596670] RAX: fffffffffffffe00 RBX: 00007f3fbff17f68 RCX: 00007f3fbfe04b19 [ 897.596678] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3fbff17f68 [ 897.596685] RBP: 00007f3fbff17f60 R08: 0000000000000000 R09: 0000000000000000 [ 897.596691] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3fbff17f6c [ 897.596698] R13: 00007fffbbf612af R14: 00007f3fbd37a300 R15: 0000000000022000 [ 897.596714] [ 897.596717] kmemleak: Object (percpu) 0x607f1a638218 (size 8): [ 897.596724] kmemleak: comm "syz-executor.5", pid 8227, jiffies 4295564459 [ 897.596731] kmemleak: min_count = 1 [ 897.596734] kmemleak: count = 0 [ 897.596738] kmemleak: flags = 0x21 [ 897.596741] kmemleak: checksum = 0 [ 897.596745] kmemleak: backtrace: [ 897.596748] pcpu_alloc_noprof+0x87a/0x1170 [ 897.596763] percpu_ref_init+0x37/0x400 [ 897.596781] io_uring_setup+0x44c/0x2000 [ 897.596792] __x64_sys_io_uring_setup+0xc8/0x170 [ 897.596802] do_syscall_64+0xbf/0x360 [ 897.596811] entry_SYSCALL_64_after_hwframe+0x77/0x7f VM DIAGNOSIS: 15:18:52 Registers: info registers vcpu 0 RAX=ffff8880138b9b80 RBX=ffffc9000a10e4b0 RCX=0000000000004002 RDX=ffff8880138b9b80 RSI=0000000000000004 RDI=ffff88803eaa7b48 RBP=0000000000000000 RSP=ffff88803eaa7bd0 R8 =0000000000000001 R9 =ffffed1007d54f69 R10=0000000000000003 R11=0000000000000001 R12=ffffc9000a10eff9 R13=ffff88800d0b3a68 R14=ffff8880138b9b80 R15=0000000000000086 RIP=ffffffff81afbe93 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555587784400 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055de483ca182 CR3=000000000cad5000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=0000000000000000410f3a0000000000 XMM03=0000ff00000000000000000000000000 XMM04=732f6c61636f6c2f7273752f3d485441 XMM05=622f6c61636f6c2f7273752f3a6e6962 XMM06=73752f3a6e6962732f7273752f3a6e69 XMM07=6e69622f3a6e6962732f3a6e69622f72 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff828e32c5 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88801722f3d0 R8 =0000000000000000 R9 =ffffed100152b046 R10=0000000000000034 R11=0000000000000001 R12=0000000000000034 R13=0000000000000010 R14=ffffffff88724140 R15=ffffffff828e32b0 RIP=ffffffff828e331d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe4500000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055de7abc8500 CR3=000000002031c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000004133130000000000 XMM03=00000000000000000000000000000000 XMM04=000000c006500c6000000000005f1837 XMM05=000000c0000153d800000000008e84e0 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=000000c00039858000000000004643c1 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=307830202c307830202c303178307b3d XMM14=302826202c637830202c7d317830202c XMM15=7b3d2930383030303030303030663778