Warning: Permanently added '[localhost]:1670' (ECDSA) to the list of known hosts. 2025/08/31 05:25:29 fuzzer started 2025/08/31 05:25:29 dialing manager at localhost:43077 syzkaller login: [ 51.648253] cgroup: Unknown subsys name 'net' [ 51.704116] cgroup: Unknown subsys name 'cpuset' [ 51.717959] cgroup: Unknown subsys name 'rlimit' 2025/08/31 05:25:40 syscalls: 202 2025/08/31 05:25:40 code coverage: enabled 2025/08/31 05:25:40 comparison tracing: enabled 2025/08/31 05:25:40 extra coverage: enabled 2025/08/31 05:25:40 setuid sandbox: enabled 2025/08/31 05:25:40 namespace sandbox: enabled 2025/08/31 05:25:40 Android sandbox: enabled 2025/08/31 05:25:40 fault injection: enabled 2025/08/31 05:25:40 leak checking: enabled 2025/08/31 05:25:40 net packet injection: enabled 2025/08/31 05:25:40 net device setup: enabled 2025/08/31 05:25:40 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2025/08/31 05:25:40 devlink PCI setup: PCI device 0000:00:10.0 is not available 2025/08/31 05:25:40 USB emulation: enabled 2025/08/31 05:25:40 hci packet injection: enabled 2025/08/31 05:25:40 wifi device emulation: enabled 2025/08/31 05:25:40 802.15.4 emulation: enabled 2025/08/31 05:25:40 fetching corpus: 0, signal 0/0 (executing program) 2025/08/31 05:25:41 starting 8 fuzzer processes 05:25:41 executing program 0: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x7, 0xb8, 0x3cf, 0x5, 0x100, 0x80}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x4, 0x80000000, 0x3, 0x5, 0x0, 0x1}) r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x10000, 0xb91, 0xb57, 0x8, 0x1eb1, 0x400}) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x0, 0x80000001, 0x6, 0xc0000000, 0x0, 0x7}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) r2 = getpgrp(r0) capget(&(0x7f0000000240)={0x20071026, r2}, &(0x7f0000000280)={0x1, 0x10000, 0x8, 0x20000, 0x3, 0x9}) r3 = fork() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1df3624dee1556c4}, 0x48001) r5 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f00000004c0)=""/220) restart_syscall() ptrace$setregs(0xd, r3, 0x8000, &(0x7f00000005c0)="128cfca67b89a562e2580e7c7b3dcf3f0d9cbee33e77e0ba4b") r6 = fork() ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000006c0)={&(0x7f0000000600)=""/132, 0x84}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8004000) restart_syscall() sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c080}, 0x0) 05:25:41 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r4, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) bind$bt_l2cap(r3, &(0x7f0000001980)={0x1f, 0xff, @none, 0x2}, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000019c0)={@loopback, @dev}, &(0x7f0000001a00)=0xc) r7 = fork() sched_setaffinity(r7, 0x8, &(0x7f0000001a40)=0x3ff) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000001a80)=0x4035af8d) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r6) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x40) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x51002000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x50, r1, 0x800, 0x0, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x48006) 05:25:41 executing program 7: sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x104, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffc00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000042}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000040}, 0x24040042) io_uring_setup(0x73cc, &(0x7f0000000300)={0x0, 0xecf2, 0x0, 0x3, 0x175}) r2 = getpgrp(0x0) ptrace$poke(0x4, r2, &(0x7f0000000380), 0x681f) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @xdp={0x2c, 0x0, 0x0, 0x2d}, @nfc={0x27, 0x0, 0x2, 0x1}, @xdp={0x2c, 0x6, 0x0, 0x23}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8000, 0x8}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r3) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000880}, 0x24004810) r5 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000880)={0x2000000a}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x500, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) [ 62.647819] audit: type=1400 audit(1756617941.701:7): avc: denied { execmem } for pid=273 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 05:25:41 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb89a582c7593ad44, &(0x7f00000005c0)={@broadcast, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000780)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0xffff8000}}, './file1\x00'}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r5) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f00000008c0)={0x0, @can, @ax25={0x3, @default, 0x7}, @xdp={0x2c, 0x7, r6, 0x13}, 0xff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000880)='ip_vti0\x00', 0xffdf, 0x8, 0x9}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000004000)={@private, @private, 0x0}, &(0x7f0000004040)=0xc) recvmmsg(r9, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can={0x1d, 0x0}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000012840)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000012800)={&(0x7f0000012580)={0x254, r10, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x40000}, 0x4000081) 05:25:41 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) r6 = getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000180)={0x80000000}) r8 = fork() ptrace$poke(0xda966f08cdbc9b7c, r8, &(0x7f00000001c0), 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x5) epoll_pwait(r7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1, &(0x7f00000002c0)={[0x4]}, 0x8) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001140)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f0000000340)={0xdb8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fff}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}, @WGDEVICE_A_PEERS={0xd74, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f7c0adfc7f5ebdda8980a95161665389fd9741b856231e3c0b3dec2cb9a72e9"}]}, {0x4ec, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ccc9759e91d4cc302ef8f803b6795004649f097c37924b7f4c818e5665d3c9ac"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xff, @loopback, 0xb97}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3f}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5}}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}]}, {0x36c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @local, 0x7f}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @mcast1, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3233f2e5ff5edacc0dffae5f2aad6a714a057c90b4d252edc2806e89c84b5ee6"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c39cccf72a8c45a5e80b6834a0bd5533717157e94c5c1ce3919522c3b2c2f129"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010102}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x800, @private1, 0xff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x2a0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @remote, 0xfffffff9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x110, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c46afdd45120f9ca08631a28d6abbc9b38fad0505457efe96e02e3ac9086b3"}, @WGPEER_A_ALLOWEDIPS={0x84, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x80000000, @mcast2, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3ff, @loopback, 0x4}}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c4f6612f3887c562e45f07ae9ca614e26d1e9508aeba8a7120ee4bcf56895f2"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xcb, @loopback, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0xdb8}, 0x1, 0x0, 0x0, 0x20040855}, 0x8080) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000001180)={0x20000000}) 05:25:41 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000640)=""/69) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x24040001) r8 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000800)={0x20071026, r8}, &(0x7f0000000840)={0x1, 0xfffffc00, 0x7fffffff, 0xfffffffe, 0x100, 0x1}) ptrace$setregs(0xd, r8, 0x9, &(0x7f0000000880)="8d4def82849e5f11ded0092373988adae8931cab66110f71f516f53339c8293a98293bde7abea9") sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x404, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x14000031) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:25:41 executing program 5: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000d180)={@multicast2, @remote, 0x0}, &(0x7f000000d1c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f000000d300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d2c0)={&(0x7f000000d200)={0xb4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8880}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000000d340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f000000d6c0)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000d680)={&(0x7f000000d3c0)={0x288, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x126, @remote, 0x101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7e62f1253b1b033f6644b7d98fc17587a28a8b8707167209fd013797622cb11"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x79c9}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0xc090}, 0x4000050) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f000000d7c0)={&(0x7f000000d700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000d780)={&(0x7f000000d740)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) bind$bt_sco(r1, &(0x7f000000d800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) prctl$PR_GET_TSC(0x19, &(0x7f000000d840)) pipe(&(0x7f000000d880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r3, &(0x7f000000d8c0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f000000d900)=""/53, &(0x7f000000d940)=0x35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_genetlink_get_family_id$smc(&(0x7f000000d980), r1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f000000da00)={0x0, @xdp={0x2c, 0x0, r0, 0x36}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2={0x1f, 0x7, @none, 0x5, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x987f, &(0x7f000000d9c0)='ipvlan1\x00', 0x1ee4, 0x4, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f000000da80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f000000dac0)={{0x1, 0x1, 0x18, r1, {0x8ad}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f000000db00)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f000000db40)=""/123, &(0x7f000000dbc0)=0x7b) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x8000000) 05:25:41 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="f108b4943eaecb7e130a68d90c2eb9345f32f88f8a1feacd268e4a111223565c7a8f9b2b76ce265d8ccc978ab95927aa71f0e38a564b400e530eabffc0") ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f00000003c0)) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000400)="5f931f300a7accb49f62f73bb367a45e2767010ad4598add4df129eb8d3c3eb3cb03291ad91b4ce15e65ed3d057880256f5be630454f26e8ca2b5ea28c5553bc3bf4860b7257dd954accacafcf7a43069abc05a8c47d65f5cf0c7fc62919089173") r4 = syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f00000004c0)=""/77) write$hidraw(r0, &(0x7f0000000540)="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", 0x1000) write$hidraw(r2, &(0x7f0000001540)="f5163a7278b09e9948768c330d50", 0xe) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000001580)) [ 63.762423] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.764733] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.766674] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.774385] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.778367] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.946822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.948818] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.950804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.955370] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.958749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.022150] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.033605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.035946] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 64.038594] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.039906] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.043719] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.046124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.047870] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.049945] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 64.051556] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 64.054774] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 64.056014] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.058143] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.059401] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 64.063023] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 64.074728] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 64.076142] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.078141] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 64.082769] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.084360] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 64.087244] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 64.102076] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.103598] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 64.106177] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 64.115004] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.117880] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 64.119627] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 64.120731] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.126334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 64.127825] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.856115] Bluetooth: hci0: command tx timeout [ 65.983530] Bluetooth: hci1: command tx timeout [ 66.175993] Bluetooth: hci4: command tx timeout [ 66.177664] Bluetooth: hci2: command tx timeout [ 66.178121] Bluetooth: hci6: command tx timeout [ 66.240891] Bluetooth: hci5: command tx timeout [ 66.242725] Bluetooth: hci3: command tx timeout [ 66.243201] Bluetooth: hci7: command tx timeout [ 67.914556] Bluetooth: hci0: command tx timeout [ 68.031544] Bluetooth: hci1: command tx timeout [ 68.223638] Bluetooth: hci4: command tx timeout [ 68.224346] Bluetooth: hci6: command tx timeout [ 68.225236] Bluetooth: hci2: command tx timeout [ 68.287621] Bluetooth: hci5: command tx timeout [ 68.288267] Bluetooth: hci7: command tx timeout [ 68.289549] Bluetooth: hci3: command tx timeout [ 69.951574] Bluetooth: hci0: command tx timeout [ 70.080530] Bluetooth: hci1: command tx timeout [ 70.272534] Bluetooth: hci2: command tx timeout [ 70.273320] Bluetooth: hci6: command tx timeout [ 70.274091] Bluetooth: hci4: command tx timeout [ 70.335833] Bluetooth: hci7: command tx timeout [ 70.336828] Bluetooth: hci3: command tx timeout [ 70.337659] Bluetooth: hci5: command tx timeout [ 72.000608] Bluetooth: hci0: command tx timeout [ 72.130489] Bluetooth: hci1: command tx timeout [ 72.319760] Bluetooth: hci6: command tx timeout [ 72.320273] Bluetooth: hci4: command tx timeout [ 72.321111] Bluetooth: hci2: command tx timeout [ 72.385507] Bluetooth: hci7: command tx timeout [ 72.385971] Bluetooth: hci5: command tx timeout [ 72.386402] Bluetooth: hci3: command tx timeout [ 100.868949] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.869651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.098747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.099446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.364293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.365008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.523523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.524217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.629701] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.630396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.724319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.725020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:26:21 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb89a582c7593ad44, &(0x7f00000005c0)={@broadcast, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000780)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0xffff8000}}, './file1\x00'}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r5) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f00000008c0)={0x0, @can, @ax25={0x3, @default, 0x7}, @xdp={0x2c, 0x7, r6, 0x13}, 0xff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000880)='ip_vti0\x00', 0xffdf, 0x8, 0x9}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000004000)={@private, @private, 0x0}, &(0x7f0000004040)=0xc) recvmmsg(r9, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can={0x1d, 0x0}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000012840)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000012800)={&(0x7f0000012580)={0x254, r10, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x40000}, 0x4000081) 05:26:21 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb89a582c7593ad44, &(0x7f00000005c0)={@broadcast, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000780)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0xffff8000}}, './file1\x00'}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r5) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f00000008c0)={0x0, @can, @ax25={0x3, @default, 0x7}, @xdp={0x2c, 0x7, r6, 0x13}, 0xff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000880)='ip_vti0\x00', 0xffdf, 0x8, 0x9}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000004000)={@private, @private, 0x0}, &(0x7f0000004040)=0xc) recvmmsg(r9, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can={0x1d, 0x0}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000012840)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000012800)={&(0x7f0000012580)={0x254, r10, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x40000}, 0x4000081) [ 102.468511] capability: warning: `syz-executor.4' uses deprecated v2 capabilities in a way that may be insecure [ 102.607122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.608674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:26:21 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000640)=""/69) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x24040001) r8 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000800)={0x20071026, r8}, &(0x7f0000000840)={0x1, 0xfffffc00, 0x7fffffff, 0xfffffffe, 0x100, 0x1}) ptrace$setregs(0xd, r8, 0x9, &(0x7f0000000880)="8d4def82849e5f11ded0092373988adae8931cab66110f71f516f53339c8293a98293bde7abea9") sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x404, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x14000031) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) [ 102.787442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.788056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:26:21 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) r6 = getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000180)={0x80000000}) r8 = fork() ptrace$poke(0xda966f08cdbc9b7c, r8, &(0x7f00000001c0), 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x5) epoll_pwait(r7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1, &(0x7f00000002c0)={[0x4]}, 0x8) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001140)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f0000000340)={0xdb8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fff}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}, @WGDEVICE_A_PEERS={0xd74, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f7c0adfc7f5ebdda8980a95161665389fd9741b856231e3c0b3dec2cb9a72e9"}]}, {0x4ec, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ccc9759e91d4cc302ef8f803b6795004649f097c37924b7f4c818e5665d3c9ac"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xff, @loopback, 0xb97}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3f}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5}}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}]}, {0x36c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @local, 0x7f}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @mcast1, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3233f2e5ff5edacc0dffae5f2aad6a714a057c90b4d252edc2806e89c84b5ee6"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c39cccf72a8c45a5e80b6834a0bd5533717157e94c5c1ce3919522c3b2c2f129"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010102}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x800, @private1, 0xff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x2a0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @remote, 0xfffffff9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x110, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c46afdd45120f9ca08631a28d6abbc9b38fad0505457efe96e02e3ac9086b3"}, @WGPEER_A_ALLOWEDIPS={0x84, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x80000000, @mcast2, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3ff, @loopback, 0x4}}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c4f6612f3887c562e45f07ae9ca614e26d1e9508aeba8a7120ee4bcf56895f2"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xcb, @loopback, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0xdb8}, 0x1, 0x0, 0x0, 0x20040855}, 0x8080) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000001180)={0x20000000}) 05:26:21 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb89a582c7593ad44, &(0x7f00000005c0)={@broadcast, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000780)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0xffff8000}}, './file1\x00'}) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r5) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f00000008c0)={0x0, @can, @ax25={0x3, @default, 0x7}, @xdp={0x2c, 0x7, r6, 0x13}, 0xff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000880)='ip_vti0\x00', 0xffdf, 0x8, 0x9}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000004000)={@private, @private, 0x0}, &(0x7f0000004040)=0xc) recvmmsg(r9, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can={0x1d, 0x0}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000012840)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000012800)={&(0x7f0000012580)={0x254, r10, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}]}, 0x254}, 0x1, 0x0, 0x0, 0x40000}, 0x4000081) 05:26:22 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000640)=""/69) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x24040001) r8 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000800)={0x20071026, r8}, &(0x7f0000000840)={0x1, 0xfffffc00, 0x7fffffff, 0xfffffffe, 0x100, 0x1}) ptrace$setregs(0xd, r8, 0x9, &(0x7f0000000880)="8d4def82849e5f11ded0092373988adae8931cab66110f71f516f53339c8293a98293bde7abea9") sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x404, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x14000031) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:26:22 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb89a582c7593ad44, &(0x7f00000005c0)={@broadcast, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000780)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0xffff8000}}, './file1\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r5) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f00000008c0)={0x0, @can, @ax25={0x3, @default, 0x7}, @xdp={0x2c, 0x7, r6, 0x13}, 0xff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000880)='ip_vti0\x00', 0xffdf, 0x8, 0x9}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000004000)={@private, @private}, &(0x7f0000004040)=0xc) recvmmsg(r9, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) 05:26:22 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) r6 = getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000180)={0x80000000}) r8 = fork() ptrace$poke(0xda966f08cdbc9b7c, r8, &(0x7f00000001c0), 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x5) epoll_pwait(r7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1, &(0x7f00000002c0)={[0x4]}, 0x8) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001140)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f0000000340)={0xdb8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fff}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}, @WGDEVICE_A_PEERS={0xd74, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f7c0adfc7f5ebdda8980a95161665389fd9741b856231e3c0b3dec2cb9a72e9"}]}, {0x4ec, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ccc9759e91d4cc302ef8f803b6795004649f097c37924b7f4c818e5665d3c9ac"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xff, @loopback, 0xb97}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3f}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5}}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}]}, {0x36c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @local, 0x7f}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @mcast1, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3233f2e5ff5edacc0dffae5f2aad6a714a057c90b4d252edc2806e89c84b5ee6"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c39cccf72a8c45a5e80b6834a0bd5533717157e94c5c1ce3919522c3b2c2f129"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010102}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x800, @private1, 0xff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x2a0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @remote, 0xfffffff9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x110, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c46afdd45120f9ca08631a28d6abbc9b38fad0505457efe96e02e3ac9086b3"}, @WGPEER_A_ALLOWEDIPS={0x84, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x80000000, @mcast2, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3ff, @loopback, 0x4}}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c4f6612f3887c562e45f07ae9ca614e26d1e9508aeba8a7120ee4bcf56895f2"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xcb, @loopback, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0xdb8}, 0x1, 0x0, 0x0, 0x20040855}, 0x8080) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000001180)={0x20000000}) [ 103.355582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.356284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.397320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.398343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.442770] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.443346] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.510377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.511053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.679616] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) [ 104.135580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.136191] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.203724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.204344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.266002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.266676] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.284759] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.285333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 05:26:38 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000640)=""/69) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x24040001) r8 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000800)={0x20071026, r8}, &(0x7f0000000840)={0x1, 0xfffffc00, 0x7fffffff, 0xfffffffe, 0x100, 0x1}) ptrace$setregs(0xd, r8, 0x9, &(0x7f0000000880)="8d4def82849e5f11ded0092373988adae8931cab66110f71f516f53339c8293a98293bde7abea9") sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x30, 0x0, 0x404, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x14000031) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:26:38 executing program 0: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x7, 0xb8, 0x3cf, 0x5, 0x100, 0x80}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x4, 0x80000000, 0x3, 0x5, 0x0, 0x1}) r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x10000, 0xb91, 0xb57, 0x8, 0x1eb1, 0x400}) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x0, 0x80000001, 0x6, 0xc0000000, 0x0, 0x7}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) r2 = getpgrp(r0) capget(&(0x7f0000000240)={0x20071026, r2}, &(0x7f0000000280)={0x1, 0x10000, 0x8, 0x20000, 0x3, 0x9}) r3 = fork() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1df3624dee1556c4}, 0x48001) r5 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f00000004c0)=""/220) restart_syscall() ptrace$setregs(0xd, r3, 0x8000, &(0x7f00000005c0)="128cfca67b89a562e2580e7c7b3dcf3f0d9cbee33e77e0ba4b") r6 = fork() ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000006c0)={&(0x7f0000000600)=""/132, 0x84}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8004000) restart_syscall() sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c080}, 0x0) 05:26:38 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb89a582c7593ad44, &(0x7f00000005c0)={@broadcast, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000780)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0xffff8000}}, './file1\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r5) ioctl$sock_SIOCADDRT(r9, 0x890b, &(0x7f00000008c0)={0x0, @can, @ax25={0x3, @default, 0x7}, @xdp={0x2c, 0x7, r6, 0x13}, 0xff, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000880)='ip_vti0\x00', 0xffdf, 0x8, 0x9}) recvmmsg(r9, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) 05:26:38 executing program 7: sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x104, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffc00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000042}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000040}, 0x24040042) io_uring_setup(0x73cc, &(0x7f0000000300)={0x0, 0xecf2, 0x0, 0x3, 0x175}) r2 = getpgrp(0x0) ptrace$poke(0x4, r2, &(0x7f0000000380), 0x681f) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @xdp={0x2c, 0x0, 0x0, 0x2d}, @nfc={0x27, 0x0, 0x2, 0x1}, @xdp={0x2c, 0x6, 0x0, 0x23}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8000, 0x8}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r3) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000880}, 0x24004810) r5 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000880)={0x2000000a}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x500, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) 05:26:38 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) r6 = getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000180)={0x80000000}) r8 = fork() ptrace$poke(0xda966f08cdbc9b7c, r8, &(0x7f00000001c0), 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x5) epoll_pwait(r7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1, &(0x7f00000002c0)={[0x4]}, 0x8) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001140)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f0000000340)={0xdb8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fff}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}, @WGDEVICE_A_PEERS={0xd74, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f7c0adfc7f5ebdda8980a95161665389fd9741b856231e3c0b3dec2cb9a72e9"}]}, {0x4ec, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ccc9759e91d4cc302ef8f803b6795004649f097c37924b7f4c818e5665d3c9ac"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xff, @loopback, 0xb97}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3f}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5}}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}]}, {0x36c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @local, 0x7f}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @mcast1, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3233f2e5ff5edacc0dffae5f2aad6a714a057c90b4d252edc2806e89c84b5ee6"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c39cccf72a8c45a5e80b6834a0bd5533717157e94c5c1ce3919522c3b2c2f129"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010102}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x800, @private1, 0xff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x2a0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @remote, 0xfffffff9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x110, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c46afdd45120f9ca08631a28d6abbc9b38fad0505457efe96e02e3ac9086b3"}, @WGPEER_A_ALLOWEDIPS={0x84, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x80000000, @mcast2, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3ff, @loopback, 0x4}}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c4f6612f3887c562e45f07ae9ca614e26d1e9508aeba8a7120ee4bcf56895f2"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xcb, @loopback, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0xdb8}, 0x1, 0x0, 0x0, 0x20040855}, 0x8080) epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000001180)={0x20000000}) 05:26:38 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="f108b4943eaecb7e130a68d90c2eb9345f32f88f8a1feacd268e4a111223565c7a8f9b2b76ce265d8ccc978ab95927aa71f0e38a564b400e530eabffc0") ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f00000003c0)) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000400)="5f931f300a7accb49f62f73bb367a45e2767010ad4598add4df129eb8d3c3eb3cb03291ad91b4ce15e65ed3d057880256f5be630454f26e8ca2b5ea28c5553bc3bf4860b7257dd954accacafcf7a43069abc05a8c47d65f5cf0c7fc62919089173") r4 = syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f00000004c0)=""/77) write$hidraw(r0, &(0x7f0000000540)="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", 0x1000) write$hidraw(r2, &(0x7f0000001540)="f5163a7278b09e9948768c330d50", 0xe) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000001580)) 05:26:38 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r4, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) bind$bt_l2cap(r3, &(0x7f0000001980)={0x1f, 0xff, @none, 0x2}, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000019c0)={@loopback, @dev}, &(0x7f0000001a00)=0xc) r7 = fork() sched_setaffinity(r7, 0x8, &(0x7f0000001a40)=0x3ff) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000001a80)=0x4035af8d) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r6) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x40) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x51002000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x50, r1, 0x800, 0x0, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x48006) 05:26:38 executing program 5: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000d180)={@multicast2, @remote, 0x0}, &(0x7f000000d1c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f000000d300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d2c0)={&(0x7f000000d200)={0xb4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8880}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000000d340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f000000d6c0)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000d680)={&(0x7f000000d3c0)={0x288, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x126, @remote, 0x101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7e62f1253b1b033f6644b7d98fc17587a28a8b8707167209fd013797622cb11"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x79c9}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0xc090}, 0x4000050) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f000000d7c0)={&(0x7f000000d700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000d780)={&(0x7f000000d740)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) bind$bt_sco(r1, &(0x7f000000d800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) prctl$PR_GET_TSC(0x19, &(0x7f000000d840)) pipe(&(0x7f000000d880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r3, &(0x7f000000d8c0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f000000d900)=""/53, &(0x7f000000d940)=0x35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_genetlink_get_family_id$smc(&(0x7f000000d980), r1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f000000da00)={0x0, @xdp={0x2c, 0x0, r0, 0x36}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2={0x1f, 0x7, @none, 0x5, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x987f, &(0x7f000000d9c0)='ipvlan1\x00', 0x1ee4, 0x4, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f000000da80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f000000dac0)={{0x1, 0x1, 0x18, r1, {0x8ad}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f000000db00)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f000000db40)=""/123, &(0x7f000000dbc0)=0x7b) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x8000000) 05:26:38 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="f108b4943eaecb7e130a68d90c2eb9345f32f88f8a1feacd268e4a111223565c7a8f9b2b76ce265d8ccc978ab95927aa71f0e38a564b400e530eabffc0") ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f00000003c0)) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000400)="5f931f300a7accb49f62f73bb367a45e2767010ad4598add4df129eb8d3c3eb3cb03291ad91b4ce15e65ed3d057880256f5be630454f26e8ca2b5ea28c5553bc3bf4860b7257dd954accacafcf7a43069abc05a8c47d65f5cf0c7fc62919089173") r4 = syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f00000004c0)=""/77) write$hidraw(r0, &(0x7f0000000540)="ddc294f924424eef1c550a2d6f634d2546e585379fdf69ad7a12d2d2472466980e2d135e05682b325232cf7afec612cad43945b817499bec254b95f502c37e8c055aff71b63fc69fd6f9044b7fbc787235bb9b191f3f36c4f91abfc9ded8401806c05b4006713e190832f02edb70e26bc06bc76a9bc18cfa93d5a9be225bd56f974feea64450c0f252823aa2f21f047102dfddf0419b00e98e291804e49d63c7acf8bbdf713268fd20e68325687f296e17b60be28b54afc0a5c6f55b3abfedeac4ed422077b3fb11813a0ed2d4f4cc0019e956bf9ce3dcb0b435b2d2ad6225c51941f2f20d2a401129167009cdf424c435b3a776ab1165f48a0d3109282c3b3c197b0eb505f160d9fcd4ef16d75ec3c62b74fa908627a31486bb40cdd74e8d3cbbd1d6127f826a74fc8275fb78be5a294aa8c227be6fe9a56f440914817799be44251f7dba5edbf12e37df37eb2bc38ace38b281eda70079723d0e1a87b7b45a58a703d90b27f4cb03a7e63edce8411924357a8fa03969cea4281cbd546abaf37de3c223e52b5cb87062fc074aeef35f29f076991734344a489dc348f501cb0432e16ab39897e67b0ffc9b6b1d6ade83f89487505e0954a8d85bb123f5d4962cb4a4dc335edbd51f5e727775c2404402b9264dd540a7be76de36da71c910a833a57711bec1a7b8353a9282a3fc99f06103cd0df61b28045b5e0b74d6f60bfa9d455b23035cdb57b51a72d75c68cbb89190d6b6033c1164b7b6911ebbc3872d3e09310fb7962feb207a7c8a4d4c9d78a7454c4506a5da838879eef5ae426086e7d58d5b1567048b31067133620adda07359fa796c15fa59e11508a925d92263a14c6331d6c43b971dce7c6a7e7dd5dcfa3fdddea2b874d56eded57a2d6243804f46379380f8cb6cbc0073a31b8466348e2dc39cda6d801781040658fecac97bf8b928622dd9ddd40b444ce943056e7400bfcefa8af3cf5be096cfc67a445e82e54453d58ec29c235ddac8898c93d73f56987c0f77f4ebd569f5073199d197b0db51a8cc9126009a10f818d8cd90cd81aa1382685259c190465e539666415f619c5abfac7f2884252541e230dd5620791253513dae570c9cfc7b10cd121c55b57d7ed2f72eb63823e6f2c564f3af8f8846275ff1ac9a72dfa0562c4e38b0716392e8383f5331e5ebad9feaf8c3a36725bb9a7c040626ccf9153e377b5c8e4519baef68b07f5d75d355b5041e80849de88f1647f4b8fe684f1ed80f4a42cd0b1198cc15f05e2523e9d1f153d1f2ecbd6dcbf8095f51efe170db00098724931d2578b44c405639487245b9e33e43298e544a306baa4fd5d9574648526770fbb9c8cca8c2a705b1e79b5e887c0da3638577a61abee376c72b6ac785f786def74ecbbd3a5a9ff4a250a345ccf20f7c88c4f7d9ccc841e3c65b4be2aebc61cdcf5bd2b48b7d3601e9403da043fabfb4d120e35931e2100b887d2dfe81f30525b1ec4d2eb62f849b892c2cfa6ff386905360586fa3cba837d675ae011ccc362d0357c22dbe381eb25352a81a32d8d04bd2a0d36760f62e5b7b35414ab813c1eece9d046a16bd8060e27d8113881694e42746d6a991a56bed91c12c8ae7d4c0e208b2dcf1c125fe8be7e989c99b635d97e045b257e4111c9638a8ab62c0e602135372a44359541ec6567a12764d346b920233917f732eb85551922a884d620818668d30a1ae61426f8a6cf726c3b2d1e445d7b408aa8665607a8656793402a970e6e4d5bedeae3edb4133e86b3a29130a452cddf880d6350c75b9d2a74c24f0d94503bdb0022ff51ac19b668f2f9700663b435c9182860829d14520d37009750312530527ac0770d2a8abda07c70a8099fdf143e5aac6a678865e962102a08d5727033caa176f5dcf387085a71af49ac6fb8502d6b0278b7773e499076ec93f11aa333d2e270c7657dfa15b832ce8f1170e48b057bc546cd76d7e7afd245528b13addc4557c88d32225b4a81f4f4bc76f7190f80451b2d298fdc68adff5ea9c0e0843d89b8f23654d7b24554b4db8aaa57a792e3fbf5d5b45934f9051aec890fad81bee80e723ae16cb24e8df8d6ce38db54e1c46e8a21a40d7da8bcf350df49fef576f801d9ae48a84635847cd05f5962d54afcec73e002ebcb20fe874c24da6286aa49144c02d6e55e8ff8b8a8a681a68994eed1cad7fcaf418e2aee29607fb20040f04542a8cb9106da4a84f7dacd88989fa20e68f7d37fe127260ff4ee977e7c9ae7d404aba49c929a46214111c151c1fdd09725853242a835334647bc26922cd398d54e62875b7b084dc022d7d10318d8c6f103718fed40d9fdc76310ea2045c76678740eff5049a79eaf0aae67c12924c672124c0a997d3b6c4ec8578cbc734beb73d6f6425eba6e0bdb7c6356eafdcab3892be7ee083bd6e0e5f0fa678437fe345fc40be3dc31463196743adb740afc57f2652103fd8f8aecfb44d4eeb3f923fdd6ce62d012a60a3263393a4d4e5a2ae54923a311d332fc6182ecf194808d1970822e60457a8cf295c1ce0544fdabae918c0fd167e0080704dee93a2cea8993afc4f5e1c0a37eb3fa560b37b4dd2d40cba8bb98b064066e7d8abf9ed93bc5e48d9cf246bbf6be67ead8912582ea3c4c12e5375572f029bd1f18704eb6219d9d0e038687315bf901282cb64e2feac7f5fbc145c0ffabad884f5e57731906437b439768009c0aaaf1567e7f6ca0b944741212d2eb976549abc7b8a7d010e7f4e3c63d77ff3f81a1c7bd0b8864c7451c90a6edfc8e7d80985ad4e86f6d8dfa1ec0bd24508165e81de409bf75027b5c0f3d7a09969172bbc3d12876e90f5e79405044107f97435f48017fd1a7cbdc07c379691903e7f2bc7b43f9810cfa1ad18bd3d3e78f787ac41897b14d1d87494c1361057667d2b97a73920d825adda2c6bc83ad13b6e13e2a3e960fdbad120581dc4df239e6a9ff3e4c2ba75b355536aa442552a5570440f6a99aeb4dea08f1be76c2c0f18d05227727bcff36fd7b88199485606ef81e4ad1702275b7bef1f53fc67c7ec8db833672da13ff419d35f0302bc83b3e6a0161f675e80d373914fba1a5f589ac8f3b808d31d1014b5d06eb2d442c5826be877829ff9fcd08da7931d2d5d57afbc2aa31d7c6d51df4c7aef6e428a575e54083d9f898e61af7c0407096c2e5b1b095d06ea6c21bab6cd05f32b11375b5ee0885f1bc635280232550c077ae06c2666c8a30b09aa440383934784f53aefd300f5646bd1a871f65f453d508ac3f5cffdf7d70b69b097da237851b713a57b0d9724baefac0a52881cd3641bdb314860234baeebda51b8144b08bd5fea5da24c09cc6bc95387e9ed085829380d5397e864868d773e30b1dd84f8e998ed7e754ef51d27fbf79bd7ecd3c327933b8360160306ffe52d885016ef1ebec7ec3763174ba9c26a526d47a0a8942132d70f760f6d71a656864f372bcd61240c19623927bf33b324ee51ca9a270eff1176967119f8c3177a1e71eb83d5780aadf6fd3d9017303f63ae8ff01c432e789ceda1466bba6402f8770d834726ae956b412167d29c131db19a8189a2ad981187735358898d9afeb4b682b1b28033638c55b64443a559c1bd28847bfd8acf08994effa8ce9be7ce6df07ff7f8ed3725df3d95963bd7135659e9aa4c8e2a4a2d12abea461577ae50772cbe92c11811baf920df73505a9881a36cf24fd39008c9399780ee338b89f8337e9320f9bdaa0542f54a920fdfec33cf01ba4482b6f98cabcefdd6dbcb21b4ce351774fd99aef0935b75549c8516e8a2ce8d860ae80f76db8ccc5a0281ea9da62d0de2faf5fcffc5742d39cc7fb18010f0350315cc5c7c0c78457251f7125b259fbe443a72df8f995acc9d619adc702f7d46cc6673f4cc0615beeaca484a976d05ee8409f0a2317b5871542d0cd1846a56f7e1f6d87668afcb99bc30c6551bf1ceab953e721b4ae6ca39d5c471041c9eadb2523f5a145190e9ad65016e49773d2b7964c778793e4a23a65efdd6d98657fc512e73fdf441920e99b0a098defec27aa46119941d763f490749269dd6ca16ad55c1c416241834da8d06d918fea48b4db0f6d267d88dbe748753ee28eff4cadbf08a7f3ffbfb8f06eb1a9007b7f79d80989468fa07b1a0514a0b6dff861061d988a090d0fecacbc4a3d678e83302c3f486a2d113a56f60382f1964cfecb4f02d16fbeb521f340c190b159e520d29bf41a112880db5f5698bed94686e1f0e52c177aa18fd9973ca1dbbe3a0679ac19eb8cd5cbc8532bcb93d79d535730bb5eada4d8e2d9e11d5098acf81c19eb3280ab98d23ae57fd83821104c17c6379790a429945bc4c722dc17d3b52ce88897f3b0f993627b865c2488e263e7d31aead26cd1b96a7f6f1162ceb6a111961d9d1fe657f985521926082b4756b4db3b68f994303460eb1a5a4e993a290d6c09c8a80995e0842f879b16eeb1ed1ab33d9bccd0fc9ad80a26f71dbbe1d56efd6f65ce449d3e877b764da38259c26f2a35d11e147cc26beb328195c8a975f821c50fd3d206c4ab8a28bf8ebab37f3311069d76eb6445a33d9dcdf06e12762a4edc71f32844e0fb89558612957ac1bf58a85dd2a798624c8819a60c36761c9608923ed436a357544c6ed2cce40725768b7503d902c3ed744cbfb0e4886987b562010b1e2f8bd4883299dd74a37c49b01731fc4183fbda2ef0bd40afbc78455b98ebf9f19c886d3b79cdc0b888e1a9cecaaf9b9fc81dcffaa1c846bd70678f087c8c91cb2145124874a276c6f9d3f981eeae54328f5467671cc8a412b1c70a532a2cfa85e44d942b92afc8c6f22696702dbdd3b3833eb9e6256490a9a1b511f40f4ab17e747739026fae0b995811d1a2dc95d4e58367746e56cf8f7e8d2d53dbfd0a2208b85a8e5badb29686364d4bdfd59e767aa92e13060ddbabfd278b1110c2fb5f5251fac16c10b679b538e35168b93e291fb220ecd4fb390e86815713c22ad82225dc20def1fd0323ab10d72cfc9e69a85c7cb0ac6454391b9f07217ea3f9cba133117cf0febea3b5c47779ffc4a43d501dff8f4a89aa35daaf0564c62ee0f9cde05ba5245b0a5003d95e95becc4d89c126091739ed1510fa7294371ba04876c9771cade9985ddd83ea950dbae64927db3f7ffa27ec3981f31f73e1e0136d112f0fdb519f5cd6f4f0c532fdeec09ab1cd9eaf78a968f2b58bd09ab7537ef8b5a194bd16a1356c8189298c05ace51eea1d1e402dd1b8617100ca40093367c069b5bb3d8cfcd6878cc7bab5e3e23f176603b638fccb797608013fb05f4aa7e9ae46700099a2429da8e29abf14a5c44e6eb8204eecd2cb9307d425a70e425ec82f0c7dace0b8684b38ec90d043b63df80be636a2ae9cca248ea8fc5486df5eb19e4d7a53315c368d13b7c64286648fba97328c9757102e9c7c9413e6eda44ea126308862e08ad3df30587019d7142ed73ecc7588cde1bc74a05c4a4f7b2bb75e8c6e07c9506b865bf7ddee79b9ada7254c4fdc4b0a1226481eb20c542cb32ce754460acb44726a7606f6968bbda207456952a30bb580900a1794bd4d785977bc94a36a271cb42336b37e04b234862e2e945579a28d1142fdb33f09810b1e1961a0a54e636276466ae837faae498b121614ac351fa4e419af3b9f7971b0370c6c01ebf7f3dd285e193ecf036656df7855cd61c9beba7fd7b73e52844fc118a51effdd2c9787ef32799ea12c4778b11ee4ad049fd5215f1f27dab779be342fa3481a04ae91210a4a8cbb04df399066a4f", 0x1000) write$hidraw(r2, &(0x7f0000001540)="f5163a7278b09e9948768c330d50", 0xe) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000001580)) 05:26:38 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r4, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) bind$bt_l2cap(r3, &(0x7f0000001980)={0x1f, 0xff, @none, 0x2}, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000019c0)={@loopback, @dev}, &(0x7f0000001a00)=0xc) r7 = fork() sched_setaffinity(r7, 0x8, &(0x7f0000001a40)=0x3ff) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000001a80)=0x4035af8d) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r6) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x40) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x51002000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x50, r1, 0x800, 0x0, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x48006) 05:26:38 executing program 0: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x7, 0xb8, 0x3cf, 0x5, 0x100, 0x80}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x4, 0x80000000, 0x3, 0x5, 0x0, 0x1}) r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x10000, 0xb91, 0xb57, 0x8, 0x1eb1, 0x400}) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x0, 0x80000001, 0x6, 0xc0000000, 0x0, 0x7}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) r2 = getpgrp(r0) capget(&(0x7f0000000240)={0x20071026, r2}, &(0x7f0000000280)={0x1, 0x10000, 0x8, 0x20000, 0x3, 0x9}) r3 = fork() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1df3624dee1556c4}, 0x48001) r5 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f00000004c0)=""/220) restart_syscall() ptrace$setregs(0xd, r3, 0x8000, &(0x7f00000005c0)="128cfca67b89a562e2580e7c7b3dcf3f0d9cbee33e77e0ba4b") r6 = fork() ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000006c0)={&(0x7f0000000600)=""/132, 0x84}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8004000) restart_syscall() sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c080}, 0x0) 05:26:47 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000640)=""/69) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x24040001) r8 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000800)={0x20071026, r8}, &(0x7f0000000840)={0x1, 0xfffffc00, 0x7fffffff, 0xfffffffe, 0x100, 0x1}) ptrace$setregs(0xd, r8, 0x9, &(0x7f0000000880)="8d4def82849e5f11ded0092373988adae8931cab66110f71f516f53339c8293a98293bde7abea9") shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:26:47 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) r6 = getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000180)={0x80000000}) r8 = fork() ptrace$poke(0xda966f08cdbc9b7c, r8, &(0x7f00000001c0), 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x5) epoll_pwait(r7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1, &(0x7f00000002c0)={[0x4]}, 0x8) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000001140)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001100)={&(0x7f0000000340)={0xdb8, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7fff}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1ff}, @WGDEVICE_A_PEERS={0xd74, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0f7c0adfc7f5ebdda8980a95161665389fd9741b856231e3c0b3dec2cb9a72e9"}]}, {0x4ec, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2e0, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @private=0xa010102}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0xfffffffb, @dev={0xfe, 0x80, '\x00', 0x14}, 0x7}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ccc9759e91d4cc302ef8f803b6795004649f097c37924b7f4c818e5665d3c9ac"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xff, @loopback, 0xb97}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_ALLOWEDIPS={0x148, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3f}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x29}}, {0x5}}]}]}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}]}, {0x36c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2f4, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @local, 0x7f}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @mcast1, 0x6}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3233f2e5ff5edacc0dffae5f2aad6a714a057c90b4d252edc2806e89c84b5ee6"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x6}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c39cccf72a8c45a5e80b6834a0bd5533717157e94c5c1ce3919522c3b2c2f129"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @loopback}}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x20}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010102}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x800, @private1, 0xff}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x2a0, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x400}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x6, @remote, 0xfffffff9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x264, 0x9, 0x0, 0x1, [{0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x18}}, {0x5, 0x3, 0x2}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x110, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "37c46afdd45120f9ca08631a28d6abbc9b38fad0505457efe96e02e3ac9086b3"}, @WGPEER_A_ALLOWEDIPS={0x84, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x80000000, @mcast2, 0x6}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3ff, @loopback, 0x4}}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3c4f6612f3887c562e45f07ae9ca614e26d1e9508aeba8a7120ee4bcf56895f2"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0xcb, @loopback, 0x7}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0xdb8}, 0x1, 0x0, 0x0, 0x20040855}, 0x8080) epoll_create1(0x80000) 05:26:47 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb89a582c7593ad44, &(0x7f00000005c0)={@broadcast, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r8 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000780)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0xffff8000}}, './file1\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), r5) recvmmsg(r9, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) 05:26:47 executing program 7: sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x104, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffc00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000042}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000040}, 0x24040042) io_uring_setup(0x73cc, &(0x7f0000000300)={0x0, 0xecf2, 0x0, 0x3, 0x175}) r2 = getpgrp(0x0) ptrace$poke(0x4, r2, &(0x7f0000000380), 0x681f) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @xdp={0x2c, 0x0, 0x0, 0x2d}, @nfc={0x27, 0x0, 0x2, 0x1}, @xdp={0x2c, 0x6, 0x0, 0x23}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8000, 0x8}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r3) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000880}, 0x24004810) r5 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000880)={0x2000000a}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x500, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) 05:26:47 executing program 5: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000d180)={@multicast2, @remote, 0x0}, &(0x7f000000d1c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f000000d300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d2c0)={&(0x7f000000d200)={0xb4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8880}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000000d340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f000000d6c0)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000d680)={&(0x7f000000d3c0)={0x288, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x126, @remote, 0x101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7e62f1253b1b033f6644b7d98fc17587a28a8b8707167209fd013797622cb11"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x79c9}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0xc090}, 0x4000050) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f000000d7c0)={&(0x7f000000d700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000d780)={&(0x7f000000d740)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) bind$bt_sco(r1, &(0x7f000000d800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) prctl$PR_GET_TSC(0x19, &(0x7f000000d840)) pipe(&(0x7f000000d880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r3, &(0x7f000000d8c0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f000000d900)=""/53, &(0x7f000000d940)=0x35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_genetlink_get_family_id$smc(&(0x7f000000d980), r1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f000000da00)={0x0, @xdp={0x2c, 0x0, r0, 0x36}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2={0x1f, 0x7, @none, 0x5, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x987f, &(0x7f000000d9c0)='ipvlan1\x00', 0x1ee4, 0x4, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f000000da80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f000000dac0)={{0x1, 0x1, 0x18, r1, {0x8ad}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f000000db00)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f000000db40)=""/123, &(0x7f000000dbc0)=0x7b) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x8000000) 05:26:47 executing program 0: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x7, 0xb8, 0x3cf, 0x5, 0x100, 0x80}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x4, 0x80000000, 0x3, 0x5, 0x0, 0x1}) r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x10000, 0xb91, 0xb57, 0x8, 0x1eb1, 0x400}) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x0, 0x80000001, 0x6, 0xc0000000, 0x0, 0x7}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) r2 = getpgrp(r0) capget(&(0x7f0000000240)={0x20071026, r2}, &(0x7f0000000280)={0x1, 0x10000, 0x8, 0x20000, 0x3, 0x9}) r3 = fork() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1df3624dee1556c4}, 0x48001) r5 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f00000004c0)=""/220) restart_syscall() ptrace$setregs(0xd, r3, 0x8000, &(0x7f00000005c0)="128cfca67b89a562e2580e7c7b3dcf3f0d9cbee33e77e0ba4b") r6 = fork() ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000006c0)={&(0x7f0000000600)=""/132, 0x84}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8004000) restart_syscall() sendmsg$NL80211_CMD_SET_MCAST_RATE(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x50, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x14}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xb4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004c080}, 0x0) 05:26:47 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="f108b4943eaecb7e130a68d90c2eb9345f32f88f8a1feacd268e4a111223565c7a8f9b2b76ce265d8ccc978ab95927aa71f0e38a564b400e530eabffc0") ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f00000003c0)) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000400)="5f931f300a7accb49f62f73bb367a45e2767010ad4598add4df129eb8d3c3eb3cb03291ad91b4ce15e65ed3d057880256f5be630454f26e8ca2b5ea28c5553bc3bf4860b7257dd954accacafcf7a43069abc05a8c47d65f5cf0c7fc62919089173") r4 = syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f00000004c0)=""/77) write$hidraw(r0, &(0x7f0000000540)="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", 0x1000) write$hidraw(r2, &(0x7f0000001540)="f5163a7278b09e9948768c330d50", 0xe) ioctl$HIDIOCGRDESCSIZE(r2, 0x80044801, &(0x7f0000001580)) 05:26:47 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) r1 = syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r2) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r4, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r3}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) bind$bt_l2cap(r3, &(0x7f0000001980)={0x1f, 0xff, @none, 0x2}, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000019c0)={@loopback, @dev}, &(0x7f0000001a00)=0xc) r7 = fork() sched_setaffinity(r7, 0x8, &(0x7f0000001a40)=0x3ff) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000001a80)=0x4035af8d) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r6) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, r8, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x40) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x51002000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x50, r1, 0x800, 0x0, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x48006) [ 128.931848] kmemleak: Found object by alias at 0x607f1a639b70 [ 128.931868] CPU: 0 UID: 0 PID: 4043 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 128.931886] Tainted: [W]=WARN [ 128.931889] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 128.931897] Call Trace: [ 128.931901] [ 128.931905] dump_stack_lvl+0xca/0x120 [ 128.931929] __lookup_object+0x94/0xb0 [ 128.931945] delete_object_full+0x27/0x70 [ 128.931961] free_percpu+0x30/0x1160 [ 128.931977] ? arch_uprobe_clear_state+0x16/0x140 [ 128.931997] futex_hash_free+0x38/0xc0 [ 128.932011] mmput+0x2d3/0x390 [ 128.932030] do_exit+0x79d/0x2970 [ 128.932043] ? signal_wake_up_state+0x85/0x120 [ 128.932059] ? zap_other_threads+0x2b9/0x3a0 [ 128.932074] ? __pfx_do_exit+0x10/0x10 [ 128.932086] ? do_group_exit+0x1c3/0x2a0 [ 128.932099] ? lock_release+0xc8/0x290 [ 128.932116] do_group_exit+0xd3/0x2a0 [ 128.932131] __x64_sys_exit_group+0x3e/0x50 [ 128.932144] x64_sys_call+0x18c5/0x18d0 [ 128.932159] do_syscall_64+0xbf/0x360 [ 128.932171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.932182] RIP: 0033:0x7fb4e0093b19 [ 128.932191] Code: Unable to access opcode bytes at 0x7fb4e0093aef. [ 128.932196] RSP: 002b:00007ffe67f05988 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 128.932207] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fb4e0093b19 [ 128.932214] RDX: 00007fb4e004672b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 128.932221] RBP: 0000000000000000 R08: 0000001b2d324d10 R09: 0000000000000000 [ 128.932228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.932234] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe67f05a70 [ 128.932250] [ 128.932253] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 128.932260] kmemleak: comm "syz-executor.0", pid 4018, jiffies 4294786390 [ 128.932267] kmemleak: min_count = 1 [ 128.932270] kmemleak: count = 1 [ 128.932274] kmemleak: flags = 0x21 [ 128.932277] kmemleak: checksum = 0 [ 128.932281] kmemleak: backtrace: [ 128.932284] pcpu_alloc_noprof+0x87a/0x1170 [ 128.932299] __percpu_counter_init_many+0x44/0x360 [ 128.932312] mm_init+0xcac/0x1170 [ 128.932320] copy_process+0x3ab7/0x73c0 [ 128.932329] kernel_clone+0xea/0x7f0 [ 128.932339] __do_sys_fork+0x94/0xd0 [ 128.932349] do_syscall_64+0xbf/0x360 [ 128.932357] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:26:47 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) r6 = getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000180)={0x80000000}) r8 = fork() ptrace$poke(0xda966f08cdbc9b7c, r8, &(0x7f00000001c0), 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x5) epoll_pwait(r7, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x1, &(0x7f00000002c0)={[0x4]}, 0x8) epoll_create1(0x80000) 05:26:48 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="f108b4943eaecb7e130a68d90c2eb9345f32f88f8a1feacd268e4a111223565c7a8f9b2b76ce265d8ccc978ab95927aa71f0e38a564b400e530eabffc0") ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f00000003c0)) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000400)="5f931f300a7accb49f62f73bb367a45e2767010ad4598add4df129eb8d3c3eb3cb03291ad91b4ce15e65ed3d057880256f5be630454f26e8ca2b5ea28c5553bc3bf4860b7257dd954accacafcf7a43069abc05a8c47d65f5cf0c7fc62919089173") r4 = syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f00000004c0)=""/77) write$hidraw(r0, &(0x7f0000000540)="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", 0x1000) write$hidraw(r2, &(0x7f0000001540)="f5163a7278b09e9948768c330d50", 0xe) 05:26:48 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) bind$bt_l2cap(r2, &(0x7f0000001980)={0x1f, 0xff, @none, 0x2}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000019c0)={@loopback, @dev}, &(0x7f0000001a00)=0xc) r6 = fork() sched_setaffinity(r6, 0x8, &(0x7f0000001a40)=0x3ff) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000001a80)=0x4035af8d) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r5) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, r7, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x48004}, 0x40) [ 129.114692] kmemleak: Found object by alias at 0x607f1a639b70 [ 129.114714] CPU: 0 UID: 0 PID: 4071 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 129.114731] Tainted: [W]=WARN [ 129.114735] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.114742] Call Trace: [ 129.114746] [ 129.114750] dump_stack_lvl+0xca/0x120 [ 129.114779] __lookup_object+0x94/0xb0 [ 129.114796] delete_object_full+0x27/0x70 [ 129.114811] free_percpu+0x30/0x1160 [ 129.114828] ? arch_uprobe_clear_state+0x16/0x140 [ 129.114848] futex_hash_free+0x38/0xc0 [ 129.114863] mmput+0x2d3/0x390 [ 129.114881] do_exit+0x79d/0x2970 [ 129.114894] ? signal_wake_up_state+0x85/0x120 [ 129.114910] ? zap_other_threads+0x2b9/0x3a0 [ 129.114925] ? __pfx_do_exit+0x10/0x10 [ 129.114937] ? do_group_exit+0x1c3/0x2a0 [ 129.114950] ? lock_release+0xc8/0x290 [ 129.114967] do_group_exit+0xd3/0x2a0 [ 129.114981] __x64_sys_exit_group+0x3e/0x50 [ 129.114995] x64_sys_call+0x18c5/0x18d0 [ 129.115010] do_syscall_64+0xbf/0x360 [ 129.115021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.115032] RIP: 0033:0x7fb4e0093b19 [ 129.115041] Code: Unable to access opcode bytes at 0x7fb4e0093aef. [ 129.115046] RSP: 002b:00007ffe67f05988 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 129.115058] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fb4e0093b19 [ 129.115065] RDX: 00007fb4e004672b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 129.115072] RBP: 0000000000000000 R08: 0000001b2d322540 R09: 0000000000000000 [ 129.115079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.115085] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe67f05a70 [ 129.115101] [ 129.115104] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 129.115111] kmemleak: comm "syz-executor.0", pid 4018, jiffies 4294786390 [ 129.115118] kmemleak: min_count = 1 [ 129.115122] kmemleak: count = 1 [ 129.115125] kmemleak: flags = 0x21 [ 129.115129] kmemleak: checksum = 0 [ 129.115132] kmemleak: backtrace: [ 129.115136] pcpu_alloc_noprof+0x87a/0x1170 [ 129.115150] __percpu_counter_init_many+0x44/0x360 [ 129.115163] mm_init+0xcac/0x1170 [ 129.115171] copy_process+0x3ab7/0x73c0 [ 129.115181] kernel_clone+0xea/0x7f0 [ 129.115190] __do_sys_fork+0x94/0xd0 [ 129.115200] do_syscall_64+0xbf/0x360 [ 129.115209] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:26:48 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="f108b4943eaecb7e130a68d90c2eb9345f32f88f8a1feacd268e4a111223565c7a8f9b2b76ce265d8ccc978ab95927aa71f0e38a564b400e530eabffc0") ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f00000003c0)) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000400)="5f931f300a7accb49f62f73bb367a45e2767010ad4598add4df129eb8d3c3eb3cb03291ad91b4ce15e65ed3d057880256f5be630454f26e8ca2b5ea28c5553bc3bf4860b7257dd954accacafcf7a43069abc05a8c47d65f5cf0c7fc62919089173") r4 = syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f00000004c0)=""/77) write$hidraw(r0, &(0x7f0000000540)="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", 0x1000) 05:26:48 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000640)=""/69) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x24040001) r8 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000800)={0x20071026, r8}, &(0x7f0000000840)={0x1, 0xfffffc00, 0x7fffffff, 0xfffffffe, 0x100, 0x1}) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) [ 129.210159] kmemleak: Found object by alias at 0x607f1a639b6c [ 129.210188] CPU: 1 UID: 0 PID: 4052 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 129.210223] Tainted: [W]=WARN [ 129.210230] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.210243] Call Trace: [ 129.210250] [ 129.210259] dump_stack_lvl+0xca/0x120 [ 129.210300] __lookup_object+0x94/0xb0 [ 129.210330] delete_object_full+0x27/0x70 [ 129.210361] free_percpu+0x30/0x1160 [ 129.210391] ? arch_uprobe_clear_state+0x16/0x140 [ 129.210429] futex_hash_free+0x38/0xc0 [ 129.210463] mmput+0x2d3/0x390 [ 129.210498] do_exit+0x79d/0x2970 [ 129.210524] ? lock_release+0xc8/0x290 [ 129.210555] ? __pfx_do_exit+0x10/0x10 [ 129.210582] ? find_held_lock+0x2b/0x80 [ 129.210614] ? get_signal+0x835/0x2340 [ 129.210652] do_group_exit+0xd3/0x2a0 [ 129.210681] get_signal+0x2315/0x2340 [ 129.210719] ? __call_rcu_common.constprop.0+0x4c1/0x960 [ 129.210750] ? __pfx_get_signal+0x10/0x10 [ 129.210781] ? do_futex+0x135/0x370 [ 129.210808] ? __pfx_do_futex+0x10/0x10 [ 129.210837] arch_do_signal_or_restart+0x80/0x790 [ 129.210869] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 129.210901] ? __x64_sys_futex+0x1c9/0x4d0 [ 129.210924] ? __x64_sys_futex+0x1d2/0x4d0 [ 129.210951] ? fput_close_sync+0x114/0x240 [ 129.210981] ? __pfx___x64_sys_futex+0x10/0x10 [ 129.211006] ? __pfx_fput_close_sync+0x10/0x10 [ 129.211034] ? dnotify_flush+0x79/0x4c0 [ 129.211053] ? xfd_validate_state+0x55/0x180 [ 129.211093] exit_to_user_mode_loop+0x8b/0x110 [ 129.211116] do_syscall_64+0x2f7/0x360 [ 129.211138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.211160] RIP: 0033:0x7fc6a4ab0b19 [ 129.211177] Code: Unable to access opcode bytes at 0x7fc6a4ab0aef. [ 129.211187] RSP: 002b:00007fc6a2026218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.211208] RAX: fffffffffffffe00 RBX: 00007fc6a4bc3f68 RCX: 00007fc6a4ab0b19 [ 129.211223] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc6a4bc3f68 [ 129.211237] RBP: 00007fc6a4bc3f60 R08: 0000000000000000 R09: 0000000000000000 [ 129.211250] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6a4bc3f6c [ 129.211263] R13: 00007ffdee4fea0f R14: 00007fc6a2026300 R15: 0000000000022000 [ 129.211294] [ 129.211301] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 129.211314] kmemleak: comm "syz-executor.1", pid 4081, jiffies 4294795821 [ 129.211328] kmemleak: min_count = 1 [ 129.211335] kmemleak: count = 0 [ 129.211342] kmemleak: flags = 0x21 [ 129.211349] kmemleak: checksum = 0 [ 129.211356] kmemleak: backtrace: [ 129.211362] pcpu_alloc_noprof+0x87a/0x1170 [ 129.211391] mm_init+0x99b/0x1170 [ 129.211407] copy_process+0x3ab7/0x73c0 [ 129.211426] kernel_clone+0xea/0x7f0 [ 129.211445] __do_sys_fork+0x94/0xd0 [ 129.211465] do_syscall_64+0xbf/0x360 [ 129.211482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.230175] kmemleak: Found object by alias at 0x607f1a639b70 [ 129.230191] CPU: 0 UID: 0 PID: 4079 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 129.230213] Tainted: [W]=WARN [ 129.230218] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.230226] Call Trace: [ 129.230230] [ 129.230235] dump_stack_lvl+0xca/0x120 [ 129.230259] __lookup_object+0x94/0xb0 [ 129.230278] delete_object_full+0x27/0x70 [ 129.230304] free_percpu+0x30/0x1160 [ 129.230323] ? arch_uprobe_clear_state+0x16/0x140 [ 129.230346] futex_hash_free+0x38/0xc0 [ 129.230361] mmput+0x2d3/0x390 [ 129.230384] do_exit+0x79d/0x2970 [ 129.230401] ? signal_wake_up_state+0x85/0x120 [ 129.230420] ? zap_other_threads+0x2b9/0x3a0 [ 129.230441] ? __pfx_do_exit+0x10/0x10 [ 129.230458] ? do_group_exit+0x1c3/0x2a0 [ 129.230475] ? lock_release+0xc8/0x290 [ 129.230495] do_group_exit+0xd3/0x2a0 [ 129.230515] __x64_sys_exit_group+0x3e/0x50 [ 129.230533] x64_sys_call+0x18c5/0x18d0 [ 129.230552] do_syscall_64+0xbf/0x360 [ 129.230566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.230580] RIP: 0033:0x7fb4e0093b19 [ 129.230591] Code: Unable to access opcode bytes at 0x7fb4e0093aef. [ 129.230598] RSP: 002b:00007ffe67f05988 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 129.230611] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fb4e0093b19 [ 129.230621] RDX: 00007fb4e004672b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 129.230630] RBP: 0000000000000000 R08: 0000001b2d322554 R09: 0000000000000000 [ 129.230639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.230648] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe67f05a70 [ 129.230668] [ 129.230673] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 129.230682] kmemleak: comm "syz-executor.1", pid 4081, jiffies 4294795821 [ 129.230691] kmemleak: min_count = 1 [ 129.230695] kmemleak: count = 0 [ 129.230700] kmemleak: flags = 0x21 [ 129.230705] kmemleak: checksum = 0 [ 129.230709] kmemleak: backtrace: [ 129.230713] pcpu_alloc_noprof+0x87a/0x1170 [ 129.230732] mm_init+0x99b/0x1170 [ 129.230743] copy_process+0x3ab7/0x73c0 [ 129.230755] kernel_clone+0xea/0x7f0 [ 129.230767] __do_sys_fork+0x94/0xd0 [ 129.230780] do_syscall_64+0xbf/0x360 [ 129.230791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.309446] kmemleak: Found object by alias at 0x607f1a639b74 [ 129.309481] CPU: 1 UID: 0 PID: 4067 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 129.309517] Tainted: [W]=WARN [ 129.309525] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 129.309539] Call Trace: [ 129.309546] [ 129.309555] dump_stack_lvl+0xca/0x120 [ 129.309598] __lookup_object+0x94/0xb0 [ 129.309630] delete_object_full+0x27/0x70 [ 129.309662] free_percpu+0x30/0x1160 [ 129.309693] ? arch_uprobe_clear_state+0x16/0x140 [ 129.309732] futex_hash_free+0x38/0xc0 [ 129.309759] mmput+0x2d3/0x390 [ 129.309796] do_exit+0x79d/0x2970 [ 129.309822] ? lock_release+0xc8/0x290 [ 129.309855] ? __pfx_do_exit+0x10/0x10 [ 129.309883] ? find_held_lock+0x2b/0x80 [ 129.309917] ? get_signal+0x835/0x2340 [ 129.309957] do_group_exit+0xd3/0x2a0 [ 129.309989] get_signal+0x2315/0x2340 [ 129.310027] ? __fget_files+0x203/0x3b0 [ 129.310057] ? __pfx_get_signal+0x10/0x10 [ 129.310090] ? do_futex+0x135/0x370 [ 129.310117] ? __pfx_do_futex+0x10/0x10 [ 129.310148] arch_do_signal_or_restart+0x80/0x790 [ 129.310183] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 129.310216] ? __x64_sys_futex+0x1c9/0x4d0 [ 129.310240] ? __x64_sys_futex+0x1d2/0x4d0 [ 129.310269] ? fput_close_sync+0x114/0x240 [ 129.310301] ? __pfx___x64_sys_futex+0x10/0x10 [ 129.310326] ? __pfx_fput_close_sync+0x10/0x10 [ 129.310356] ? dnotify_flush+0x79/0x4c0 [ 129.310376] ? xfd_validate_state+0x55/0x180 [ 129.310418] exit_to_user_mode_loop+0x8b/0x110 [ 129.310443] do_syscall_64+0x2f7/0x360 [ 129.310467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.310490] RIP: 0033:0x7f810899bb19 [ 129.310508] Code: Unable to access opcode bytes at 0x7f810899baef. [ 129.310519] RSP: 002b:00007f8105ecf218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 129.310541] RAX: fffffffffffffe00 RBX: 00007f8108aaf0e8 RCX: 00007f810899bb19 [ 129.310556] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8108aaf0e8 [ 129.310570] RBP: 00007f8108aaf0e0 R08: 0000000000000000 R09: 0000000000000000 [ 129.310584] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8108aaf0ec [ 129.310598] R13: 00007ffce534972f R14: 00007f8105ecf300 R15: 0000000000022000 [ 129.310631] [ 129.310638] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 129.310652] kmemleak: comm "syz-executor.1", pid 4081, jiffies 4294795821 [ 129.310666] kmemleak: min_count = 1 [ 129.310674] kmemleak: count = 0 [ 129.310681] kmemleak: flags = 0x21 [ 129.310689] kmemleak: checksum = 0 [ 129.310696] kmemleak: backtrace: [ 129.310702] pcpu_alloc_noprof+0x87a/0x1170 [ 129.310733] mm_init+0x99b/0x1170 [ 129.310749] copy_process+0x3ab7/0x73c0 [ 129.310770] kernel_clone+0xea/0x7f0 [ 129.310789] __do_sys_fork+0x94/0xd0 [ 129.310811] do_syscall_64+0xbf/0x360 [ 129.310828] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:26:58 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="f108b4943eaecb7e130a68d90c2eb9345f32f88f8a1feacd268e4a111223565c7a8f9b2b76ce265d8ccc978ab95927aa71f0e38a564b400e530eabffc0") ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f00000003c0)) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000400)="5f931f300a7accb49f62f73bb367a45e2767010ad4598add4df129eb8d3c3eb3cb03291ad91b4ce15e65ed3d057880256f5be630454f26e8ca2b5ea28c5553bc3bf4860b7257dd954accacafcf7a43069abc05a8c47d65f5cf0c7fc62919089173") r4 = syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) ioctl$HIDIOCGRAWINFO(r4, 0x80084803, &(0x7f00000004c0)=""/77) 05:26:58 executing program 5: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000d180)={@multicast2, @remote, 0x0}, &(0x7f000000d1c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f000000d300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d2c0)={&(0x7f000000d200)={0xb4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8880}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000000d340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f000000d6c0)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000d680)={&(0x7f000000d3c0)={0x288, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x126, @remote, 0x101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7e62f1253b1b033f6644b7d98fc17587a28a8b8707167209fd013797622cb11"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x79c9}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0xc090}, 0x4000050) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f000000d7c0)={&(0x7f000000d700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000d780)={&(0x7f000000d740)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) bind$bt_sco(r1, &(0x7f000000d800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) prctl$PR_GET_TSC(0x19, &(0x7f000000d840)) pipe(&(0x7f000000d880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r3, &(0x7f000000d8c0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f000000d900)=""/53, &(0x7f000000d940)=0x35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_genetlink_get_family_id$smc(&(0x7f000000d980), r1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f000000da00)={0x0, @xdp={0x2c, 0x0, r0, 0x36}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2={0x1f, 0x7, @none, 0x5, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x987f, &(0x7f000000d9c0)='ipvlan1\x00', 0x1ee4, 0x4, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f000000da80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f000000dac0)={{0x1, 0x1, 0x18, r1, {0x8ad}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f000000db00)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f000000db40)=""/123, &(0x7f000000dbc0)=0x7b) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x8000000) 05:26:58 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000640)=""/69) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x24040001) getpgrp(0xffffffffffffffff) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:26:58 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) r6 = getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000180)={0x80000000}) r7 = fork() ptrace$poke(0xda966f08cdbc9b7c, r7, &(0x7f00000001c0), 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000200)=0x5) epoll_create1(0x80000) 05:26:58 executing program 0: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x7, 0xb8, 0x3cf, 0x5, 0x100, 0x80}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x4, 0x80000000, 0x3, 0x5, 0x0, 0x1}) r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x10000, 0xb91, 0xb57, 0x8, 0x1eb1, 0x400}) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x0, 0x80000001, 0x6, 0xc0000000, 0x0, 0x7}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) r2 = getpgrp(r0) capget(&(0x7f0000000240)={0x20071026, r2}, &(0x7f0000000280)={0x1, 0x10000, 0x8, 0x20000, 0x3, 0x9}) r3 = fork() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1df3624dee1556c4}, 0x48001) r5 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f00000004c0)=""/220) restart_syscall() ptrace$setregs(0xd, r3, 0x8000, &(0x7f00000005c0)="128cfca67b89a562e2580e7c7b3dcf3f0d9cbee33e77e0ba4b") r6 = fork() ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000006c0)={&(0x7f0000000600)=""/132, 0x84}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8004000) restart_syscall() 05:26:58 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) bind$bt_l2cap(r2, &(0x7f0000001980)={0x1f, 0xff, @none, 0x2}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000019c0)={@loopback, @dev}, &(0x7f0000001a00)=0xc) r6 = fork() sched_setaffinity(r6, 0x8, &(0x7f0000001a40)=0x3ff) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000001a80)=0x4035af8d) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r5) 05:26:58 executing program 7: sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x104, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffc00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000042}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000040}, 0x24040042) io_uring_setup(0x73cc, &(0x7f0000000300)={0x0, 0xecf2, 0x0, 0x3, 0x175}) r2 = getpgrp(0x0) ptrace$poke(0x4, r2, &(0x7f0000000380), 0x681f) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @xdp={0x2c, 0x0, 0x0, 0x2d}, @nfc={0x27, 0x0, 0x2, 0x1}, @xdp={0x2c, 0x6, 0x0, 0x23}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8000, 0x8}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r3) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000880}, 0x24004810) r5 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000880)={0x2000000a}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x500, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r5, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r8, {0x5}}, './file0\x00'}) 05:26:58 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb89a582c7593ad44, &(0x7f00000005c0)={@broadcast, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) r7 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000780)='memory.pressure\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0xffff8000}}, './file1\x00'}) recvmmsg(r8, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) [ 139.166835] kmemleak: Found object by alias at 0x607f1a639b70 [ 139.166871] CPU: 0 UID: 0 PID: 4105 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.166908] Tainted: [W]=WARN [ 139.166916] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.166929] Call Trace: [ 139.166937] [ 139.166946] dump_stack_lvl+0xca/0x120 [ 139.166990] __lookup_object+0x94/0xb0 [ 139.167023] delete_object_full+0x27/0x70 [ 139.167055] free_percpu+0x30/0x1160 [ 139.167088] ? arch_uprobe_clear_state+0x16/0x140 [ 139.167128] futex_hash_free+0x38/0xc0 [ 139.167156] mmput+0x2d3/0x390 [ 139.167193] do_exit+0x79d/0x2970 [ 139.167229] ? __pfx_do_exit+0x10/0x10 [ 139.167258] ? find_held_lock+0x2b/0x80 [ 139.167293] ? get_signal+0x835/0x2340 [ 139.167333] do_group_exit+0xd3/0x2a0 [ 139.167364] get_signal+0x2315/0x2340 [ 139.167400] ? put_task_stack+0xd2/0x240 [ 139.167430] ? __pfx_get_signal+0x10/0x10 [ 139.167471] ? __schedule+0xe91/0x3590 [ 139.167511] arch_do_signal_or_restart+0x80/0x790 [ 139.167547] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 139.167580] ? __x64_sys_futex+0x1c9/0x4d0 [ 139.167606] ? __x64_sys_futex+0x1d2/0x4d0 [ 139.167633] ? __fget_files+0x20d/0x3b0 [ 139.167657] ? __pfx___x64_sys_futex+0x10/0x10 [ 139.167710] exit_to_user_mode_loop+0x8b/0x110 [ 139.167736] do_syscall_64+0x2f7/0x360 [ 139.167760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.167784] RIP: 0033:0x7fb4e0093b19 [ 139.167802] Code: Unable to access opcode bytes at 0x7fb4e0093aef. [ 139.167813] RSP: 002b:00007fb4dd609218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.167836] RAX: 0000000000000001 RBX: 00007fb4e01a6f68 RCX: 00007fb4e0093b19 [ 139.167851] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4e01a6f6c [ 139.167866] RBP: 00007fb4e01a6f60 R08: 0000000000000009 R09: 0000000000000000 [ 139.167880] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fb4e01a6f6c [ 139.167895] R13: 00007ffe67f0575f R14: 00007fb4dd609300 R15: 0000000000022000 [ 139.167928] [ 139.167935] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 139.167949] kmemleak: comm "syz-executor.1", pid 4081, jiffies 4294795821 [ 139.167963] kmemleak: min_count = 1 [ 139.167971] kmemleak: count = 1 [ 139.167979] kmemleak: flags = 0x21 [ 139.167987] kmemleak: checksum = 0 [ 139.167994] kmemleak: backtrace: [ 139.168001] pcpu_alloc_noprof+0x87a/0x1170 [ 139.168032] mm_init+0x99b/0x1170 [ 139.168049] copy_process+0x3ab7/0x73c0 [ 139.168069] kernel_clone+0xea/0x7f0 [ 139.168089] __do_sys_fork+0x94/0xd0 [ 139.168111] do_syscall_64+0xbf/0x360 [ 139.168128] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:26:58 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000640)=""/69) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r3) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, r7, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r5}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_VERSION={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x24040001) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:26:58 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="f108b4943eaecb7e130a68d90c2eb9345f32f88f8a1feacd268e4a111223565c7a8f9b2b76ce265d8ccc978ab95927aa71f0e38a564b400e530eabffc0") ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f00000003c0)) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000400)="5f931f300a7accb49f62f73bb367a45e2767010ad4598add4df129eb8d3c3eb3cb03291ad91b4ce15e65ed3d057880256f5be630454f26e8ca2b5ea28c5553bc3bf4860b7257dd954accacafcf7a43069abc05a8c47d65f5cf0c7fc62919089173") syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) 05:26:58 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000180)={0x80000000}) r6 = fork() ptrace$poke(0xda966f08cdbc9b7c, r6, &(0x7f00000001c0), 0x0) epoll_create1(0x80000) [ 139.379103] kmemleak: Found object by alias at 0x607f1a639b6c [ 139.379131] CPU: 0 UID: 0 PID: 4121 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.379164] Tainted: [W]=WARN [ 139.379171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.379183] Call Trace: [ 139.379190] [ 139.379198] dump_stack_lvl+0xca/0x120 [ 139.379238] __lookup_object+0x94/0xb0 [ 139.379268] delete_object_full+0x27/0x70 [ 139.379298] free_percpu+0x30/0x1160 [ 139.379328] ? arch_uprobe_clear_state+0x16/0x140 [ 139.379364] futex_hash_free+0x38/0xc0 [ 139.379389] mmput+0x2d3/0x390 [ 139.379423] do_exit+0x79d/0x2970 [ 139.379448] ? lock_release+0xc8/0x290 [ 139.379486] ? __pfx_do_exit+0x10/0x10 [ 139.379512] ? find_held_lock+0x2b/0x80 [ 139.379543] ? get_signal+0x835/0x2340 [ 139.379580] do_group_exit+0xd3/0x2a0 [ 139.379607] get_signal+0x2315/0x2340 [ 139.379644] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 139.379670] ? __pfx_get_signal+0x10/0x10 [ 139.379714] ? do_futex+0x135/0x370 [ 139.379739] ? __pfx_do_futex+0x10/0x10 [ 139.379767] arch_do_signal_or_restart+0x80/0x790 [ 139.379799] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 139.379830] ? __x64_sys_futex+0x1c9/0x4d0 [ 139.379852] ? __x64_sys_futex+0x1d2/0x4d0 [ 139.379880] ? __pfx___x64_sys_futex+0x10/0x10 [ 139.379904] ? selinux_file_ioctl+0xb9/0x280 [ 139.379932] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 139.379960] exit_to_user_mode_loop+0x8b/0x110 [ 139.379983] do_syscall_64+0x2f7/0x360 [ 139.380006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.380027] RIP: 0033:0x7fc6a4ab0b19 [ 139.380043] Code: Unable to access opcode bytes at 0x7fc6a4ab0aef. [ 139.380052] RSP: 002b:00007fc6a2005218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.380073] RAX: fffffffffffffe00 RBX: 00007fc6a4bc4028 RCX: 00007fc6a4ab0b19 [ 139.380087] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc6a4bc4028 [ 139.380100] RBP: 00007fc6a4bc4020 R08: 0000000000000000 R09: 0000000000000000 [ 139.380112] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6a4bc402c [ 139.380125] R13: 00007ffdee4fea0f R14: 00007fc6a2005300 R15: 0000000000022000 [ 139.380155] [ 139.380162] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 139.380174] kmemleak: comm "syz-executor.1", pid 4081, jiffies 4294795821 [ 139.380187] kmemleak: min_count = 1 [ 139.380194] kmemleak: count = 1 [ 139.380200] kmemleak: flags = 0x21 [ 139.380207] kmemleak: checksum = 0 [ 139.380214] kmemleak: backtrace: [ 139.380220] pcpu_alloc_noprof+0x87a/0x1170 [ 139.380248] mm_init+0x99b/0x1170 [ 139.380263] copy_process+0x3ab7/0x73c0 [ 139.380282] kernel_clone+0xea/0x7f0 [ 139.380300] __do_sys_fork+0x94/0xd0 [ 139.380319] do_syscall_64+0xbf/0x360 [ 139.380335] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:26:58 executing program 5: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000d180)={@multicast2, @remote, 0x0}, &(0x7f000000d1c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f000000d300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d2c0)={&(0x7f000000d200)={0xb4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8880}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000000d340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f000000d6c0)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000d680)={&(0x7f000000d3c0)={0x288, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x126, @remote, 0x101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7e62f1253b1b033f6644b7d98fc17587a28a8b8707167209fd013797622cb11"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x79c9}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0xc090}, 0x4000050) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f000000d7c0)={&(0x7f000000d700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000d780)={&(0x7f000000d740)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) bind$bt_sco(r1, &(0x7f000000d800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) prctl$PR_GET_TSC(0x19, &(0x7f000000d840)) pipe(&(0x7f000000d880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r3, &(0x7f000000d8c0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f000000d900)=""/53, &(0x7f000000d940)=0x35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_genetlink_get_family_id$smc(&(0x7f000000d980), r1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f000000da00)={0x0, @xdp={0x2c, 0x0, r0, 0x36}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2={0x1f, 0x7, @none, 0x5, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x987f, &(0x7f000000d9c0)='ipvlan1\x00', 0x1ee4, 0x4, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f000000da80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f000000dac0)={{0x1, 0x1, 0x18, r1, {0x8ad}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f000000db00)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f000000db40)=""/123, &(0x7f000000dbc0)=0x7b) 05:26:58 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) bind$bt_l2cap(r2, &(0x7f0000001980)={0x1f, 0xff, @none, 0x2}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000019c0)={@loopback, @dev}, &(0x7f0000001a00)=0xc) r6 = fork() sched_setaffinity(r6, 0x8, &(0x7f0000001a40)=0x3ff) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r5) 05:26:58 executing program 7: sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x104, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffc00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000042}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000040}, 0x24040042) io_uring_setup(0x73cc, &(0x7f0000000300)={0x0, 0xecf2, 0x0, 0x3, 0x175}) r2 = getpgrp(0x0) ptrace$poke(0x4, r2, &(0x7f0000000380), 0x681f) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @xdp={0x2c, 0x0, 0x0, 0x2d}, @nfc={0x27, 0x0, 0x2, 0x1}, @xdp={0x2c, 0x6, 0x0, 0x23}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8000, 0x8}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r3) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000880}, 0x24004810) r5 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000880)={0x2000000a}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x500, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 05:26:58 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb89a582c7593ad44, &(0x7f00000005c0)={@broadcast, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000780)='memory.pressure\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) 05:26:58 executing program 0: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x7, 0xb8, 0x3cf, 0x5, 0x100, 0x80}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x4, 0x80000000, 0x3, 0x5, 0x0, 0x1}) r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x10000, 0xb91, 0xb57, 0x8, 0x1eb1, 0x400}) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x0, 0x80000001, 0x6, 0xc0000000, 0x0, 0x7}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) r2 = getpgrp(r0) capget(&(0x7f0000000240)={0x20071026, r2}, &(0x7f0000000280)={0x1, 0x10000, 0x8, 0x20000, 0x3, 0x9}) r3 = fork() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1df3624dee1556c4}, 0x48001) r5 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f00000004c0)=""/220) restart_syscall() ptrace$setregs(0xd, r3, 0x8000, &(0x7f00000005c0)="128cfca67b89a562e2580e7c7b3dcf3f0d9cbee33e77e0ba4b") r6 = fork() ptrace$getregset(0x4204, r6, 0x201, &(0x7f00000006c0)={&(0x7f0000000600)=""/132, 0x84}) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r1, 0x2, 0x70bd28, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8004000) [ 139.561942] kmemleak: Found object by alias at 0x607f1a639b70 [ 139.561975] CPU: 1 UID: 0 PID: 4132 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.562007] Tainted: [W]=WARN [ 139.562014] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.562026] Call Trace: [ 139.562033] [ 139.562041] dump_stack_lvl+0xca/0x120 [ 139.562081] __lookup_object+0x94/0xb0 [ 139.562110] delete_object_full+0x27/0x70 [ 139.562138] free_percpu+0x30/0x1160 [ 139.562166] ? arch_uprobe_clear_state+0x16/0x140 [ 139.562201] futex_hash_free+0x38/0xc0 [ 139.562226] mmput+0x2d3/0x390 [ 139.562258] do_exit+0x79d/0x2970 [ 139.562290] ? __pfx_do_exit+0x10/0x10 [ 139.562315] ? find_held_lock+0x2b/0x80 [ 139.562346] ? get_signal+0x835/0x2340 [ 139.562381] do_group_exit+0xd3/0x2a0 [ 139.562408] get_signal+0x2315/0x2340 [ 139.562439] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 139.562477] ? __pfx_get_signal+0x10/0x10 [ 139.562506] ? __schedule+0xe91/0x3590 [ 139.562541] arch_do_signal_or_restart+0x80/0x790 [ 139.562572] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 139.562601] ? __x64_sys_futex+0x1c9/0x4d0 [ 139.562623] ? __x64_sys_futex+0x1d2/0x4d0 [ 139.562648] ? __x64_sys_openat+0x142/0x200 [ 139.562678] ? __pfx___x64_sys_futex+0x10/0x10 [ 139.562711] exit_to_user_mode_loop+0x8b/0x110 [ 139.562734] do_syscall_64+0x2f7/0x360 [ 139.562755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.562776] RIP: 0033:0x7fb4e0093b19 [ 139.562791] Code: Unable to access opcode bytes at 0x7fb4e0093aef. [ 139.562801] RSP: 002b:00007fb4dd609218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.562821] RAX: 0000000000000001 RBX: 00007fb4e01a6f68 RCX: 00007fb4e0093b19 [ 139.562834] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4e01a6f6c [ 139.562847] RBP: 00007fb4e01a6f60 R08: 0000000000000016 R09: 0000000000000000 [ 139.562859] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fb4e01a6f6c [ 139.562872] R13: 00007ffe67f0575f R14: 00007fb4dd609300 R15: 0000000000022000 [ 139.562901] [ 139.562908] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 139.562920] kmemleak: comm "syz-executor.1", pid 274, jiffies 4294806100 [ 139.562933] kmemleak: min_count = 1 [ 139.562940] kmemleak: count = 0 [ 139.562946] kmemleak: flags = 0x21 [ 139.562953] kmemleak: checksum = 0 [ 139.562960] kmemleak: backtrace: [ 139.562965] pcpu_alloc_noprof+0x87a/0x1170 [ 139.562992] mm_init+0x99b/0x1170 [ 139.563007] copy_process+0x3ab7/0x73c0 [ 139.563025] kernel_clone+0xea/0x7f0 [ 139.563042] __do_sys_clone+0xce/0x120 [ 139.563060] do_syscall_64+0xbf/0x360 [ 139.563075] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:26:58 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="f108b4943eaecb7e130a68d90c2eb9345f32f88f8a1feacd268e4a111223565c7a8f9b2b76ce265d8ccc978ab95927aa71f0e38a564b400e530eabffc0") ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r3, 0x80404804, &(0x7f00000003c0)) syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) 05:26:58 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000180)={0x80000000}) fork() epoll_create1(0x80000) [ 139.993233] kmemleak: Found object by alias at 0x607f1a639b70 [ 139.993263] CPU: 1 UID: 0 PID: 4167 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 139.993294] Tainted: [W]=WARN [ 139.993301] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 139.993313] Call Trace: [ 139.993319] [ 139.993327] dump_stack_lvl+0xca/0x120 [ 139.993367] __lookup_object+0x94/0xb0 [ 139.993394] delete_object_full+0x27/0x70 [ 139.993422] free_percpu+0x30/0x1160 [ 139.993450] ? arch_uprobe_clear_state+0x16/0x140 [ 139.993491] futex_hash_free+0x38/0xc0 [ 139.993515] mmput+0x2d3/0x390 [ 139.993547] do_exit+0x79d/0x2970 [ 139.993577] ? __pfx_do_exit+0x10/0x10 [ 139.993602] ? find_held_lock+0x2b/0x80 [ 139.993633] ? get_signal+0x835/0x2340 [ 139.993668] do_group_exit+0xd3/0x2a0 [ 139.993694] get_signal+0x2315/0x2340 [ 139.993734] ? __pfx_get_signal+0x10/0x10 [ 139.993763] ? do_futex+0x135/0x370 [ 139.993787] ? __pfx_do_futex+0x10/0x10 [ 139.993814] arch_do_signal_or_restart+0x80/0x790 [ 139.993844] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 139.993872] ? __x64_sys_futex+0x1c9/0x4d0 [ 139.993894] ? __x64_sys_futex+0x1d2/0x4d0 [ 139.993918] ? __x64_sys_openat+0x142/0x200 [ 139.993947] ? __pfx___x64_sys_futex+0x10/0x10 [ 139.993971] ? xfd_validate_state+0x55/0x180 [ 139.994007] exit_to_user_mode_loop+0x8b/0x110 [ 139.994029] do_syscall_64+0x2f7/0x360 [ 139.994050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.994070] RIP: 0033:0x7fb4e0093b19 [ 139.994085] Code: Unable to access opcode bytes at 0x7fb4e0093aef. [ 139.994094] RSP: 002b:00007fb4dd609218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 139.994114] RAX: fffffffffffffe00 RBX: 00007fb4e01a6f68 RCX: 00007fb4e0093b19 [ 139.994127] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb4e01a6f68 [ 139.994140] RBP: 00007fb4e01a6f60 R08: 0000000000000000 R09: 0000000000000000 [ 139.994152] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4e01a6f6c [ 139.994164] R13: 00007ffe67f0575f R14: 00007fb4dd609300 R15: 0000000000022000 [ 139.994192] [ 139.994198] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 139.994210] kmemleak: comm "syz-executor.3", pid 4170, jiffies 4294806614 [ 139.994222] kmemleak: min_count = 1 [ 139.994229] kmemleak: count = 0 [ 139.994235] kmemleak: flags = 0x21 [ 139.994242] kmemleak: checksum = 0 [ 139.994248] kmemleak: backtrace: [ 139.994254] pcpu_alloc_noprof+0x87a/0x1170 [ 139.994280] mm_init+0x99b/0x1170 [ 139.994295] copy_process+0x3ab7/0x73c0 [ 139.994312] kernel_clone+0xea/0x7f0 [ 139.994330] __do_sys_fork+0x94/0xd0 [ 139.994348] do_syscall_64+0xbf/0x360 [ 139.994363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.038943] kmemleak: Found object by alias at 0x607f1a639b74 [ 140.038970] CPU: 1 UID: 0 PID: 4142 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 140.039001] Tainted: [W]=WARN [ 140.039007] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 140.039019] Call Trace: [ 140.039025] [ 140.039032] dump_stack_lvl+0xca/0x120 [ 140.039065] __lookup_object+0x94/0xb0 [ 140.039091] delete_object_full+0x27/0x70 [ 140.039118] free_percpu+0x30/0x1160 [ 140.039144] ? arch_uprobe_clear_state+0x16/0x140 [ 140.039177] futex_hash_free+0x38/0xc0 [ 140.039199] mmput+0x2d3/0x390 [ 140.039231] do_exit+0x79d/0x2970 [ 140.039254] ? signal_wake_up_state+0x85/0x120 [ 140.039280] ? zap_other_threads+0x2b9/0x3a0 [ 140.039307] ? __pfx_do_exit+0x10/0x10 [ 140.039330] ? do_group_exit+0x1c3/0x2a0 [ 140.039354] ? lock_release+0xc8/0x290 [ 140.039382] do_group_exit+0xd3/0x2a0 [ 140.039408] __x64_sys_exit_group+0x3e/0x50 [ 140.039432] x64_sys_call+0x18c5/0x18d0 [ 140.039464] do_syscall_64+0xbf/0x360 [ 140.039484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.039503] RIP: 0033:0x7f810899bb19 [ 140.039518] Code: Unable to access opcode bytes at 0x7f810899baef. [ 140.039526] RSP: 002b:00007ffce5349958 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 140.039545] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f810899bb19 [ 140.039558] RDX: 00007f810894e72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 140.039571] RBP: 0000000000000000 R08: 0000001b2d022ee8 R09: 0000000000000000 [ 140.039583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.039594] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffce5349a40 [ 140.039622] [ 140.039628] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 140.039640] kmemleak: comm "syz-executor.3", pid 4170, jiffies 4294806614 [ 140.039652] kmemleak: min_count = 1 [ 140.039659] kmemleak: count = 0 [ 140.039665] kmemleak: flags = 0x21 [ 140.039672] kmemleak: checksum = 0 [ 140.039678] kmemleak: backtrace: [ 140.039683] pcpu_alloc_noprof+0x87a/0x1170 [ 140.039720] mm_init+0x99b/0x1170 [ 140.039734] copy_process+0x3ab7/0x73c0 [ 140.039751] kernel_clone+0xea/0x7f0 [ 140.039769] __do_sys_fork+0x94/0xd0 [ 140.039787] do_syscall_64+0xbf/0x360 [ 140.039802] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:27:07 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000180)={0x80000000}) epoll_create1(0x80000) 05:27:07 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="f108b4943eaecb7e130a68d90c2eb9345f32f88f8a1feacd268e4a111223565c7a8f9b2b76ce265d8ccc978ab95927aa71f0e38a564b400e530eabffc0") ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000380)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x3ff}}, './file0\x00'}) syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) 05:27:07 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000640)=""/69) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) syz_genetlink_get_family_id$gtp(&(0x7f0000000700), r3) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:27:07 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb89a582c7593ad44, &(0x7f00000005c0)={@broadcast, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0xc018937a, &(0x7f0000000740)={{0x1, 0x1, 0x18, r3, {0x9}}, './file0\x00'}) recvmmsg(0xffffffffffffffff, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) 05:27:07 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) bind$bt_l2cap(r2, &(0x7f0000001980)={0x1f, 0xff, @none, 0x2}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000019c0)={@loopback, @dev}, &(0x7f0000001a00)=0xc) fork() syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r5) 05:27:07 executing program 5: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000d180)={@multicast2, @remote, 0x0}, &(0x7f000000d1c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f000000d300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d2c0)={&(0x7f000000d200)={0xb4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8880}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000000d340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f000000d6c0)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000d680)={&(0x7f000000d3c0)={0x288, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x126, @remote, 0x101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7e62f1253b1b033f6644b7d98fc17587a28a8b8707167209fd013797622cb11"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x79c9}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0xc090}, 0x4000050) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f000000d7c0)={&(0x7f000000d700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000d780)={&(0x7f000000d740)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) bind$bt_sco(r1, &(0x7f000000d800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) prctl$PR_GET_TSC(0x19, &(0x7f000000d840)) pipe(&(0x7f000000d880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r3, &(0x7f000000d8c0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f000000d900)=""/53, &(0x7f000000d940)=0x35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_genetlink_get_family_id$smc(&(0x7f000000d980), r1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f000000da00)={0x0, @xdp={0x2c, 0x0, r0, 0x36}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2={0x1f, 0x7, @none, 0x5, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x987f, &(0x7f000000d9c0)='ipvlan1\x00', 0x1ee4, 0x4, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f000000da80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f000000dac0)={{0x1, 0x1, 0x18, r1, {0x8ad}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f000000db00)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f000000db40)=""/123, &(0x7f000000dbc0)=0x7b) 05:27:07 executing program 7: sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x104, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffc00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000042}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000040}, 0x24040042) io_uring_setup(0x73cc, &(0x7f0000000300)={0x0, 0xecf2, 0x0, 0x3, 0x175}) r2 = getpgrp(0x0) ptrace$poke(0x4, r2, &(0x7f0000000380), 0x681f) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @xdp={0x2c, 0x0, 0x0, 0x2d}, @nfc={0x27, 0x0, 0x2, 0x1}, @xdp={0x2c, 0x6, 0x0, 0x23}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8000, 0x8}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r3) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000880}, 0x24004810) r5 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000880)={0x2000000a}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 05:27:07 executing program 0: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x7, 0xb8, 0x3cf, 0x5, 0x100, 0x80}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x4, 0x80000000, 0x3, 0x5, 0x0, 0x1}) r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x10000, 0xb91, 0xb57, 0x8, 0x1eb1, 0x400}) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x0, 0x80000001, 0x6, 0xc0000000, 0x0, 0x7}) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) r1 = getpgrp(r0) capget(&(0x7f0000000240)={0x20071026, r1}, &(0x7f0000000280)={0x1, 0x10000, 0x8, 0x20000, 0x3, 0x9}) r2 = fork() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1df3624dee1556c4}, 0x48001) r4 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f00000004c0)=""/220) restart_syscall() ptrace$setregs(0xd, r2, 0x8000, &(0x7f00000005c0)="128cfca67b89a562e2580e7c7b3dcf3f0d9cbee33e77e0ba4b") r5 = fork() ptrace$getregset(0x4204, r5, 0x201, &(0x7f00000006c0)={&(0x7f0000000600)=""/132, 0x84}) 05:27:07 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000180)={0x80000000}) epoll_create1(0x80000) [ 148.809609] kmemleak: Found object by alias at 0x607f1a639b70 [ 148.809635] CPU: 1 UID: 0 PID: 4182 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 148.809667] Tainted: [W]=WARN [ 148.809674] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 148.809686] Call Trace: [ 148.809692] [ 148.809700] dump_stack_lvl+0xca/0x120 [ 148.809738] __lookup_object+0x94/0xb0 [ 148.809766] delete_object_full+0x27/0x70 [ 148.809795] free_percpu+0x30/0x1160 [ 148.809823] ? arch_uprobe_clear_state+0x16/0x140 [ 148.809858] futex_hash_free+0x38/0xc0 [ 148.809881] mmput+0x2d3/0x390 [ 148.809914] do_exit+0x79d/0x2970 [ 148.809938] ? signal_wake_up_state+0x85/0x120 [ 148.809965] ? zap_other_threads+0x2b9/0x3a0 [ 148.809993] ? __pfx_do_exit+0x10/0x10 [ 148.810016] ? do_group_exit+0x1c3/0x2a0 [ 148.810041] ? lock_release+0xc8/0x290 [ 148.810070] do_group_exit+0xd3/0x2a0 [ 148.810097] __x64_sys_exit_group+0x3e/0x50 [ 148.810122] x64_sys_call+0x18c5/0x18d0 [ 148.810148] do_syscall_64+0xbf/0x360 [ 148.810169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.810189] RIP: 0033:0x7fb4e0093b19 [ 148.810204] Code: Unable to access opcode bytes at 0x7fb4e0093aef. [ 148.810213] RSP: 002b:00007ffe67f05988 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 148.810233] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fb4e0093b19 [ 148.810247] RDX: 00007fb4e004672b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 148.810260] RBP: 0000000000000000 R08: 0000001b2d322468 R09: 0000000000000000 [ 148.810272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.810284] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe67f05a70 [ 148.810313] [ 148.810319] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 148.810331] kmemleak: comm "syz-executor.3", pid 4170, jiffies 4294806614 [ 148.810344] kmemleak: min_count = 1 [ 148.810351] kmemleak: count = 1 [ 148.810357] kmemleak: flags = 0x21 [ 148.810364] kmemleak: checksum = 0 [ 148.810370] kmemleak: backtrace: [ 148.810377] pcpu_alloc_noprof+0x87a/0x1170 [ 148.810404] mm_init+0x99b/0x1170 [ 148.810419] copy_process+0x3ab7/0x73c0 [ 148.810437] kernel_clone+0xea/0x7f0 [ 148.810462] __do_sys_fork+0x94/0xd0 [ 148.810481] do_syscall_64+0xbf/0x360 [ 148.810496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.926166] kmemleak: Found object by alias at 0x607f1a639b6c [ 148.926192] CPU: 1 UID: 0 PID: 4203 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 148.926224] Tainted: [W]=WARN [ 148.926231] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 148.926243] Call Trace: [ 148.926250] [ 148.926258] dump_stack_lvl+0xca/0x120 [ 148.926300] __lookup_object+0x94/0xb0 [ 148.926329] delete_object_full+0x27/0x70 [ 148.926359] free_percpu+0x30/0x1160 [ 148.926388] ? arch_uprobe_clear_state+0x16/0x140 [ 148.926424] futex_hash_free+0x38/0xc0 [ 148.926449] mmput+0x2d3/0x390 [ 148.926491] do_exit+0x79d/0x2970 [ 148.926516] ? lock_release+0xc8/0x290 [ 148.926545] ? __pfx_do_exit+0x10/0x10 [ 148.926571] ? find_held_lock+0x2b/0x80 [ 148.926602] ? get_signal+0x835/0x2340 [ 148.926638] do_group_exit+0xd3/0x2a0 [ 148.926665] get_signal+0x2315/0x2340 [ 148.926698] ? __fget_files+0x203/0x3b0 [ 148.926725] ? __pfx_get_signal+0x10/0x10 [ 148.926755] ? do_futex+0x135/0x370 [ 148.926780] ? __pfx_do_futex+0x10/0x10 [ 148.926808] arch_do_signal_or_restart+0x80/0x790 [ 148.926840] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 148.926870] ? __x64_sys_futex+0x1c9/0x4d0 [ 148.926892] ? __x64_sys_futex+0x1d2/0x4d0 [ 148.926918] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 148.926940] ? __pfx___x64_sys_futex+0x10/0x10 [ 148.926965] ? kcov_ioctl+0x386/0x6c0 [ 148.926997] exit_to_user_mode_loop+0x8b/0x110 [ 148.927020] do_syscall_64+0x2f7/0x360 [ 148.927041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.927063] RIP: 0033:0x7fc6a4ab0b19 [ 148.927078] Code: Unable to access opcode bytes at 0x7fc6a4ab0aef. [ 148.927088] RSP: 002b:00007fc6a2005218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.927108] RAX: fffffffffffffe00 RBX: 00007fc6a4bc4028 RCX: 00007fc6a4ab0b19 [ 148.927122] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc6a4bc4028 [ 148.927135] RBP: 00007fc6a4bc4020 R08: 0000000000000000 R09: 0000000000000000 [ 148.927147] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6a4bc402c [ 148.927160] R13: 00007ffdee4fea0f R14: 00007fc6a2005300 R15: 0000000000022000 [ 148.927189] [ 148.927196] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 148.927208] kmemleak: comm "syz-executor.3", pid 4170, jiffies 4294806614 [ 148.927221] kmemleak: min_count = 1 [ 148.927228] kmemleak: count = 1 [ 148.927235] kmemleak: flags = 0x21 [ 148.927241] kmemleak: checksum = 0 [ 148.927248] kmemleak: backtrace: [ 148.927254] pcpu_alloc_noprof+0x87a/0x1170 [ 148.927282] mm_init+0x99b/0x1170 [ 148.927296] copy_process+0x3ab7/0x73c0 [ 148.927315] kernel_clone+0xea/0x7f0 [ 148.927333] __do_sys_fork+0x94/0xd0 [ 148.927351] do_syscall_64+0xbf/0x360 [ 148.927367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.939811] kmemleak: Found object by alias at 0x607f1a639b74 [ 148.939834] CPU: 0 UID: 0 PID: 4201 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 148.939852] Tainted: [W]=WARN [ 148.939856] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 148.939864] Call Trace: [ 148.939868] [ 148.939873] dump_stack_lvl+0xca/0x120 [ 148.939899] __lookup_object+0x94/0xb0 [ 148.939917] delete_object_full+0x27/0x70 [ 148.939933] free_percpu+0x30/0x1160 [ 148.939949] ? arch_uprobe_clear_state+0x16/0x140 [ 148.939969] futex_hash_free+0x38/0xc0 [ 148.939985] mmput+0x2d3/0x390 [ 148.940004] do_exit+0x79d/0x2970 [ 148.940018] ? lock_release+0xc8/0x290 [ 148.940035] ? __pfx_do_exit+0x10/0x10 [ 148.940049] ? find_held_lock+0x2b/0x80 [ 148.940070] ? get_signal+0x835/0x2340 [ 148.940091] do_group_exit+0xd3/0x2a0 [ 148.940110] get_signal+0x2315/0x2340 [ 148.940127] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 148.940145] ? __pfx_get_signal+0x10/0x10 [ 148.940161] ? do_futex+0x135/0x370 [ 148.940175] ? __pfx_do_futex+0x10/0x10 [ 148.940189] arch_do_signal_or_restart+0x80/0x790 [ 148.940208] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 148.940223] ? __x64_sys_futex+0x1c9/0x4d0 [ 148.940235] ? __x64_sys_futex+0x1d2/0x4d0 [ 148.940249] ? fput_close_sync+0x114/0x240 [ 148.940265] ? __pfx___x64_sys_futex+0x10/0x10 [ 148.940277] ? __pfx_fput_close_sync+0x10/0x10 [ 148.940291] ? dnotify_flush+0x79/0x4c0 [ 148.940303] ? xfd_validate_state+0x55/0x180 [ 148.940324] exit_to_user_mode_loop+0x8b/0x110 [ 148.940338] do_syscall_64+0x2f7/0x360 [ 148.940350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.940362] RIP: 0033:0x7f810899bb19 [ 148.940370] Code: Unable to access opcode bytes at 0x7f810899baef. [ 148.940377] RSP: 002b:00007f8105ef0218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.940388] RAX: fffffffffffffe00 RBX: 00007f8108aaf028 RCX: 00007f810899bb19 [ 148.940396] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8108aaf028 [ 148.940403] RBP: 00007f8108aaf020 R08: 0000000000000000 R09: 0000000000000000 [ 148.940410] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8108aaf02c [ 148.940417] R13: 00007ffce534972f R14: 00007f8105ef0300 R15: 0000000000022000 [ 148.940433] [ 148.940437] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 148.940443] kmemleak: comm "syz-executor.3", pid 4170, jiffies 4294806614 [ 148.940450] kmemleak: min_count = 1 [ 148.940454] kmemleak: count = 1 [ 148.940458] kmemleak: flags = 0x21 [ 148.940462] kmemleak: checksum = 0 [ 148.940466] kmemleak: backtrace: [ 148.940469] pcpu_alloc_noprof+0x87a/0x1170 [ 148.940484] mm_init+0x99b/0x1170 [ 148.940492] copy_process+0x3ab7/0x73c0 [ 148.940501] kernel_clone+0xea/0x7f0 [ 148.940511] __do_sys_fork+0x94/0xd0 [ 148.940521] do_syscall_64+0xbf/0x360 [ 148.940529] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:27:07 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="f108b4943eaecb7e130a68d90c2eb9345f32f88f8a1feacd268e4a111223565c7a8f9b2b76ce265d8ccc978ab95927aa71f0e38a564b400e530eabffc0") ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000340)) syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) 05:27:08 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)={0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local, 0x0}, &(0x7f0000000540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb89a582c7593ad44, &(0x7f00000005c0)={@broadcast, @empty, 0x0}, &(0x7f0000000600)=0xc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r3, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x54, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8800}, 0x20000004) recvmmsg(0xffffffffffffffff, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) 05:27:08 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r4, &(0x7f0000000180)={0x80000000}) epoll_create1(0x80000) [ 149.198229] kmemleak: Found object by alias at 0x607f1a639b74 [ 149.198253] CPU: 0 UID: 0 PID: 4228 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 149.198280] Tainted: [W]=WARN [ 149.198286] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 149.198297] Call Trace: [ 149.198303] [ 149.198309] dump_stack_lvl+0xca/0x120 [ 149.198346] __lookup_object+0x94/0xb0 [ 149.198372] delete_object_full+0x27/0x70 [ 149.198398] free_percpu+0x30/0x1160 [ 149.198423] ? arch_uprobe_clear_state+0x16/0x140 [ 149.198459] futex_hash_free+0x38/0xc0 [ 149.198482] mmput+0x2d3/0x390 [ 149.198515] do_exit+0x79d/0x2970 [ 149.198536] ? lock_release+0xc8/0x290 [ 149.198562] ? __pfx_do_exit+0x10/0x10 [ 149.198584] ? find_held_lock+0x2b/0x80 [ 149.198608] ? get_signal+0x835/0x2340 [ 149.198639] do_group_exit+0xd3/0x2a0 [ 149.198663] get_signal+0x2315/0x2340 [ 149.198698] ? __pfx_get_signal+0x10/0x10 [ 149.198724] ? do_futex+0x135/0x370 [ 149.198746] ? __pfx_do_futex+0x10/0x10 [ 149.198770] arch_do_signal_or_restart+0x80/0x790 [ 149.198797] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 149.198823] ? __x64_sys_futex+0x1c9/0x4d0 [ 149.198841] ? __x64_sys_futex+0x1d2/0x4d0 [ 149.198863] ? do_pipe2+0xab/0x1b0 [ 149.198884] ? __pfx___x64_sys_futex+0x10/0x10 [ 149.198903] ? selinux_file_ioctl+0xb9/0x280 [ 149.198926] ? pipe_ioctl+0x1ea/0x260 [ 149.198950] exit_to_user_mode_loop+0x8b/0x110 [ 149.198970] do_syscall_64+0x2f7/0x360 [ 149.198989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.199008] RIP: 0033:0x7f810899bb19 [ 149.199021] Code: Unable to access opcode bytes at 0x7f810899baef. [ 149.199029] RSP: 002b:00007f8105ecf218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 149.199045] RAX: fffffffffffffe00 RBX: 00007f8108aaf0e8 RCX: 00007f810899bb19 [ 149.199057] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8108aaf0e8 [ 149.199068] RBP: 00007f8108aaf0e0 R08: 0000000000000000 R09: 0000000000000000 [ 149.199079] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8108aaf0ec [ 149.199090] R13: 00007ffce534972f R14: 00007f8105ecf300 R15: 0000000000022000 [ 149.199116] [ 149.199122] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 149.199132] kmemleak: comm "systemd-udevd", pid 114, jiffies 4294815805 [ 149.199142] kmemleak: min_count = 1 [ 149.199148] kmemleak: count = 0 [ 149.199153] kmemleak: flags = 0x21 [ 149.199159] kmemleak: checksum = 0 [ 149.199165] kmemleak: backtrace: [ 149.199170] pcpu_alloc_noprof+0x87a/0x1170 [ 149.199192] mm_init+0x99b/0x1170 [ 149.199205] copy_process+0x3ab7/0x73c0 [ 149.199220] kernel_clone+0xea/0x7f0 [ 149.199236] __do_sys_clone+0xce/0x120 [ 149.199251] do_syscall_64+0xbf/0x360 [ 149.199264] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:27:16 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000300)="f108b4943eaecb7e130a68d90c2eb9345f32f88f8a1feacd268e4a111223565c7a8f9b2b76ce265d8ccc978ab95927aa71f0e38a564b400e530eabffc0") syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) 05:27:16 executing program 7: sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x104, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffc00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000042}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000040}, 0x24040042) io_uring_setup(0x73cc, &(0x7f0000000300)={0x0, 0xecf2, 0x0, 0x3, 0x175}) r2 = getpgrp(0x0) ptrace$poke(0x4, r2, &(0x7f0000000380), 0x681f) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @xdp={0x2c, 0x0, 0x0, 0x2d}, @nfc={0x27, 0x0, 0x2, 0x1}, @xdp={0x2c, 0x6, 0x0, 0x23}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8000, 0x8}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r3) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000880}, 0x24004810) r5 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000880)={0x2000000a}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 05:27:16 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local}, &(0x7f0000000540)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0xb89a582c7593ad44, &(0x7f00000005c0)={@broadcast, @empty}, &(0x7f0000000600)=0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) 05:27:16 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) bind$bt_l2cap(r2, &(0x7f0000001980)={0x1f, 0xff, @none, 0x2}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f00000019c0)={@loopback, @dev}, &(0x7f0000001a00)=0xc) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r5) 05:27:16 executing program 0: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x7, 0xb8, 0x3cf, 0x5, 0x100, 0x80}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x4, 0x80000000, 0x3, 0x5, 0x0, 0x1}) r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x10000, 0xb91, 0xb57, 0x8, 0x1eb1, 0x400}) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x0, 0x80000001, 0x6, 0xc0000000, 0x0, 0x7}) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) r1 = getpgrp(r0) capget(&(0x7f0000000240)={0x20071026, r1}, &(0x7f0000000280)={0x1, 0x10000, 0x8, 0x20000, 0x3, 0x9}) r2 = fork() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1df3624dee1556c4}, 0x48001) r4 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r4, 0x3, &(0x7f00000004c0)=""/220) restart_syscall() ptrace$setregs(0xd, r2, 0x8000, &(0x7f00000005c0)="128cfca67b89a562e2580e7c7b3dcf3f0d9cbee33e77e0ba4b") fork() 05:27:16 executing program 5: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000d180)={@multicast2, @remote, 0x0}, &(0x7f000000d1c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f000000d300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d2c0)={&(0x7f000000d200)={0xb4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8880}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000000d340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f000000d6c0)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000d680)={&(0x7f000000d3c0)={0x288, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x126, @remote, 0x101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7e62f1253b1b033f6644b7d98fc17587a28a8b8707167209fd013797622cb11"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x79c9}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0xc090}, 0x4000050) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f000000d7c0)={&(0x7f000000d700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000d780)={&(0x7f000000d740)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) bind$bt_sco(r1, &(0x7f000000d800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) prctl$PR_GET_TSC(0x19, &(0x7f000000d840)) pipe(&(0x7f000000d880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r3, &(0x7f000000d8c0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f000000d900)=""/53, &(0x7f000000d940)=0x35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_genetlink_get_family_id$smc(&(0x7f000000d980), r1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f000000da00)={0x0, @xdp={0x2c, 0x0, r0, 0x36}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2={0x1f, 0x7, @none, 0x5, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x987f, &(0x7f000000d9c0)='ipvlan1\x00', 0x1ee4, 0x4, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f000000da80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f000000dac0)={{0x1, 0x1, 0x18, r1, {0x8ad}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f000000db00)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) getsockopt$bt_sco_SCO_CONNINFO(r6, 0x11, 0x2, &(0x7f000000db40)=""/123, &(0x7f000000dbc0)=0x7b) 05:27:16 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) getpgrp(r5) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) fork() epoll_create1(0x80000) 05:27:16 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000640)=""/69) shmget(0x3, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) [ 157.120183] kmemleak: Found object by alias at 0x607f1a639b70 [ 157.120205] CPU: 0 UID: 0 PID: 4234 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 157.120223] Tainted: [W]=WARN [ 157.120227] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 157.120235] Call Trace: [ 157.120239] [ 157.120244] dump_stack_lvl+0xca/0x120 [ 157.120273] __lookup_object+0x94/0xb0 [ 157.120291] delete_object_full+0x27/0x70 [ 157.120308] free_percpu+0x30/0x1160 [ 157.120325] ? arch_uprobe_clear_state+0x16/0x140 [ 157.120345] futex_hash_free+0x38/0xc0 [ 157.120361] mmput+0x2d3/0x390 [ 157.120380] do_exit+0x79d/0x2970 [ 157.120394] ? signal_wake_up_state+0x85/0x120 [ 157.120413] ? zap_other_threads+0x2b9/0x3a0 [ 157.120428] ? __pfx_do_exit+0x10/0x10 [ 157.120441] ? do_group_exit+0x1c3/0x2a0 [ 157.120459] ? lock_release+0xc8/0x290 [ 157.120476] do_group_exit+0xd3/0x2a0 [ 157.120491] __x64_sys_exit_group+0x3e/0x50 [ 157.120505] x64_sys_call+0x18c5/0x18d0 [ 157.120521] do_syscall_64+0xbf/0x360 [ 157.120533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.120545] RIP: 0033:0x7fb4e0093b19 [ 157.120554] Code: Unable to access opcode bytes at 0x7fb4e0093aef. [ 157.120559] RSP: 002b:00007ffe67f05988 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 157.120570] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007fb4e0093b19 [ 157.120578] RDX: 00007fb4e004672b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 157.120585] RBP: 0000000000000000 R08: 0000001b2d322440 R09: 0000000000000000 [ 157.120592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.120599] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffe67f05a70 [ 157.120615] [ 157.120619] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 157.120626] kmemleak: comm "syz-executor.6", pid 285, jiffies 4294823675 [ 157.120633] kmemleak: min_count = 1 [ 157.120637] kmemleak: count = 0 [ 157.120641] kmemleak: flags = 0x21 [ 157.120644] kmemleak: checksum = 0 [ 157.120648] kmemleak: backtrace: [ 157.120652] pcpu_alloc_noprof+0x87a/0x1170 [ 157.120667] mm_init+0x99b/0x1170 [ 157.120675] copy_process+0x3ab7/0x73c0 [ 157.120685] kernel_clone+0xea/0x7f0 [ 157.120694] __do_sys_clone+0xce/0x120 [ 157.120704] do_syscall_64+0xbf/0x360 [ 157.120712] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:27:16 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000640)=""/69) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:27:16 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) write$hidraw(r0, &(0x7f0000000200)="6e69123a1f44e5bda0c147076ded53bc0d364e7838911933fedfb9cf8e2697ac39dc1fbc7d2ba52e3fe346ca36440a193c31113d8bbc1cf8c9906077cf7270948e473898ee643cbf74050fe3313c8a271f51496e13b90226d607f0b84cdcde55a5ffef28ea6199faadb628f86b165abcdcdb6e27fb33f9bf26ad6dc4d00738d245e0f0a173ffb1a4c89901cecb3c6617218ff39737fb8d0260c5979eebc2aade2aef968bf18d47e38b0a4e076328a57636c3b29995135f6980793cf1d6450678d2ac7951e53802469256411293a2f529000b423258827bf1c0b3d2", 0xdb) syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) 05:27:16 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1, 0x0}, &(0x7f0000000440)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x11c, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000040) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:27:16 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) bind$bt_l2cap(r2, &(0x7f0000001980)={0x1f, 0xff, @none, 0x2}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r5) [ 157.307742] kmemleak: Found object by alias at 0x607f1a639b70 [ 157.307766] CPU: 0 UID: 0 PID: 4265 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 157.307785] Tainted: [W]=WARN [ 157.307789] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 157.307796] Call Trace: [ 157.307800] [ 157.307805] dump_stack_lvl+0xca/0x120 [ 157.307831] __lookup_object+0x94/0xb0 [ 157.307848] delete_object_full+0x27/0x70 [ 157.307873] free_percpu+0x30/0x1160 [ 157.307889] ? arch_uprobe_clear_state+0x16/0x140 [ 157.307909] futex_hash_free+0x38/0xc0 [ 157.307923] mmput+0x2d3/0x390 [ 157.307942] do_exit+0x79d/0x2970 [ 157.307959] ? __pfx_do_exit+0x10/0x10 [ 157.307973] ? find_held_lock+0x2b/0x80 [ 157.307991] ? get_signal+0x835/0x2340 [ 157.308011] do_group_exit+0xd3/0x2a0 [ 157.308025] get_signal+0x2315/0x2340 [ 157.308042] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 157.308059] ? __pfx_get_signal+0x10/0x10 [ 157.308075] ? __schedule+0xe91/0x3590 [ 157.308095] arch_do_signal_or_restart+0x80/0x790 [ 157.308113] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 157.308128] ? __x64_sys_futex+0x1c9/0x4d0 [ 157.308140] ? __x64_sys_futex+0x1d2/0x4d0 [ 157.308153] ? __x64_sys_openat+0x142/0x200 [ 157.308170] ? __pfx___x64_sys_futex+0x10/0x10 [ 157.308182] ? ksys_write+0x1a3/0x240 [ 157.308198] exit_to_user_mode_loop+0x8b/0x110 [ 157.308211] do_syscall_64+0x2f7/0x360 [ 157.308223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.308235] RIP: 0033:0x7fb4e0093b19 [ 157.308244] Code: Unable to access opcode bytes at 0x7fb4e0093aef. [ 157.308249] RSP: 002b:00007fb4dd609218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.308260] RAX: 0000000000000001 RBX: 00007fb4e01a6f68 RCX: 00007fb4e0093b19 [ 157.308268] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4e01a6f6c [ 157.308274] RBP: 00007fb4e01a6f60 R08: 0000000000000016 R09: 0000000000000000 [ 157.308281] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fb4e01a6f6c [ 157.308288] R13: 00007ffe67f0575f R14: 00007fb4dd609300 R15: 0000000000022000 [ 157.308304] [ 157.308307] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 157.308314] kmemleak: comm "syz-executor.1", pid 274, jiffies 4294823913 [ 157.308321] kmemleak: min_count = 1 [ 157.308324] kmemleak: count = 0 [ 157.308328] kmemleak: flags = 0x21 [ 157.308332] kmemleak: checksum = 0 [ 157.308335] kmemleak: backtrace: [ 157.308339] pcpu_alloc_noprof+0x87a/0x1170 [ 157.308353] mm_init+0x99b/0x1170 [ 157.308362] copy_process+0x3ab7/0x73c0 [ 157.308371] kernel_clone+0xea/0x7f0 [ 157.308381] __do_sys_clone+0xce/0x120 [ 157.308390] do_syscall_64+0xbf/0x360 [ 157.308398] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:27:25 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@initdev, @multicast1}, &(0x7f0000000440)=0xc) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:27:25 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) bind$bt_l2cap(r2, &(0x7f0000001980)={0x1f, 0xff, @none, 0x2}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), r5) 05:27:25 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000500)={@initdev, @local}, &(0x7f0000000540)=0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) 05:27:25 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x10010, r2, 0x8000000) syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) 05:27:25 executing program 5: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000d180)={@multicast2, @remote, 0x0}, &(0x7f000000d1c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f000000d300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d2c0)={&(0x7f000000d200)={0xb4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8880}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000000d340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f000000d6c0)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000d680)={&(0x7f000000d3c0)={0x288, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x126, @remote, 0x101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7e62f1253b1b033f6644b7d98fc17587a28a8b8707167209fd013797622cb11"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x79c9}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0xc090}, 0x4000050) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f000000d7c0)={&(0x7f000000d700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000d780)={&(0x7f000000d740)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) bind$bt_sco(r1, &(0x7f000000d800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) prctl$PR_GET_TSC(0x19, &(0x7f000000d840)) pipe(&(0x7f000000d880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r3, &(0x7f000000d8c0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f000000d900)=""/53, &(0x7f000000d940)=0x35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_genetlink_get_family_id$smc(&(0x7f000000d980), r1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f000000da00)={0x0, @xdp={0x2c, 0x0, r0, 0x36}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2={0x1f, 0x7, @none, 0x5, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x987f, &(0x7f000000d9c0)='ipvlan1\x00', 0x1ee4, 0x4, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f000000da80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f000000dac0)={{0x1, 0x1, 0x18, r1, {0x8ad}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f000000db00)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 05:27:25 executing program 7: sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x104, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffc00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000042}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000040}, 0x24040042) io_uring_setup(0x73cc, &(0x7f0000000300)={0x0, 0xecf2, 0x0, 0x3, 0x175}) r2 = getpgrp(0x0) ptrace$poke(0x4, r2, &(0x7f0000000380), 0x681f) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @xdp={0x2c, 0x0, 0x0, 0x2d}, @nfc={0x27, 0x0, 0x2, 0x1}, @xdp={0x2c, 0x6, 0x0, 0x23}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8000, 0x8}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r3) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000880}, 0x24004810) r5 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000880)={0x2000000a}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r6, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 05:27:25 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) getpgrp(r5) fork() epoll_create1(0x80000) 05:27:25 executing program 0: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x7, 0xb8, 0x3cf, 0x5, 0x100, 0x80}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x4, 0x80000000, 0x3, 0x5, 0x0, 0x1}) r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x10000, 0xb91, 0xb57, 0x8, 0x1eb1, 0x400}) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x0, 0x80000001, 0x6, 0xc0000000, 0x0, 0x7}) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) r1 = getpgrp(r0) capget(&(0x7f0000000240)={0x20071026, r1}, &(0x7f0000000280)={0x1, 0x10000, 0x8, 0x20000, 0x3, 0x9}) fork() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1df3624dee1556c4}, 0x48001) r3 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f00000004c0)=""/220) restart_syscall() fork() [ 166.076074] kmemleak: Found object by alias at 0x607f1a639b70 [ 166.076095] CPU: 0 UID: 0 PID: 4286 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 166.076113] Tainted: [W]=WARN [ 166.076116] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 166.076123] Call Trace: [ 166.076127] [ 166.076132] dump_stack_lvl+0xca/0x120 [ 166.076157] __lookup_object+0x94/0xb0 [ 166.076174] delete_object_full+0x27/0x70 [ 166.076190] free_percpu+0x30/0x1160 [ 166.076206] ? arch_uprobe_clear_state+0x16/0x140 [ 166.076226] futex_hash_free+0x38/0xc0 [ 166.076240] mmput+0x2d3/0x390 [ 166.076258] do_exit+0x79d/0x2970 [ 166.076275] ? __pfx_do_exit+0x10/0x10 [ 166.076289] ? find_held_lock+0x2b/0x80 [ 166.076306] ? get_signal+0x835/0x2340 [ 166.076326] do_group_exit+0xd3/0x2a0 [ 166.076340] get_signal+0x2315/0x2340 [ 166.076361] ? put_task_stack+0xd2/0x240 [ 166.076375] ? __pfx_get_signal+0x10/0x10 [ 166.076391] ? __schedule+0xe91/0x3590 [ 166.076410] arch_do_signal_or_restart+0x80/0x790 [ 166.076427] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 166.076442] ? __x64_sys_futex+0x1c9/0x4d0 [ 166.076454] ? __x64_sys_futex+0x1d2/0x4d0 [ 166.076468] ? __x64_sys_openat+0x142/0x200 [ 166.076484] ? __pfx___x64_sys_futex+0x10/0x10 [ 166.076502] exit_to_user_mode_loop+0x8b/0x110 [ 166.076515] do_syscall_64+0x2f7/0x360 [ 166.076526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.076538] RIP: 0033:0x7fb4e0093b19 [ 166.076547] Code: Unable to access opcode bytes at 0x7fb4e0093aef. [ 166.076552] RSP: 002b:00007fb4dd609218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.076563] RAX: 0000000000000001 RBX: 00007fb4e01a6f68 RCX: 00007fb4e0093b19 [ 166.076570] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4e01a6f6c [ 166.076577] RBP: 00007fb4e01a6f60 R08: 0000000000000016 R09: 0000000000000000 [ 166.076584] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fb4e01a6f6c [ 166.076591] R13: 00007ffe67f0575f R14: 00007fb4dd609300 R15: 0000000000022000 [ 166.076606] [ 166.076610] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 166.076616] kmemleak: comm "syz-executor.4", pid 284, jiffies 4294832638 [ 166.076623] kmemleak: min_count = 1 [ 166.076627] kmemleak: count = 0 [ 166.076630] kmemleak: flags = 0x21 [ 166.076634] kmemleak: checksum = 0 [ 166.076638] kmemleak: backtrace: [ 166.076641] pcpu_alloc_noprof+0x87a/0x1170 [ 166.076656] mm_init+0x99b/0x1170 [ 166.076664] copy_process+0x3ab7/0x73c0 [ 166.076674] kernel_clone+0xea/0x7f0 [ 166.076683] __do_sys_clone+0xce/0x120 [ 166.076693] do_syscall_64+0xbf/0x360 [ 166.076701] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:27:25 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) bind$bt_l2cap(r2, &(0x7f0000001980)={0x1f, 0xff, @none, 0x2}, 0xe) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff) [ 166.163916] kmemleak: Found object by alias at 0x607f1a639b6c [ 166.163935] CPU: 0 UID: 0 PID: 4299 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 166.163961] Tainted: [W]=WARN [ 166.163965] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 166.163972] Call Trace: [ 166.163976] [ 166.163980] dump_stack_lvl+0xca/0x120 [ 166.164005] __lookup_object+0x94/0xb0 [ 166.164021] delete_object_full+0x27/0x70 [ 166.164037] free_percpu+0x30/0x1160 [ 166.164053] ? arch_uprobe_clear_state+0x16/0x140 [ 166.164072] futex_hash_free+0x38/0xc0 [ 166.164086] mmput+0x2d3/0x390 [ 166.164104] do_exit+0x79d/0x2970 [ 166.164122] ? __pfx_do_exit+0x10/0x10 [ 166.164135] ? find_held_lock+0x2b/0x80 [ 166.164153] ? get_signal+0x835/0x2340 [ 166.164172] do_group_exit+0xd3/0x2a0 [ 166.164186] get_signal+0x2315/0x2340 [ 166.164203] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 166.164220] ? __pfx_get_signal+0x10/0x10 [ 166.164235] ? do_futex+0x135/0x370 [ 166.164249] ? __pfx_do_futex+0x10/0x10 [ 166.164263] arch_do_signal_or_restart+0x80/0x790 [ 166.164280] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 166.164296] ? __x64_sys_futex+0x1c9/0x4d0 [ 166.164308] ? __x64_sys_futex+0x1d2/0x4d0 [ 166.164321] ? __fget_files+0x20d/0x3b0 [ 166.164332] ? __pfx___x64_sys_futex+0x10/0x10 [ 166.164345] ? xfd_validate_state+0x55/0x180 [ 166.164366] exit_to_user_mode_loop+0x8b/0x110 [ 166.164378] do_syscall_64+0x2f7/0x360 [ 166.164390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.164401] RIP: 0033:0x7fc6a4ab0b19 [ 166.164410] Code: Unable to access opcode bytes at 0x7fc6a4ab0aef. [ 166.164415] RSP: 002b:00007fc6a2005218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.164426] RAX: fffffffffffffe00 RBX: 00007fc6a4bc4028 RCX: 00007fc6a4ab0b19 [ 166.164433] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc6a4bc4028 [ 166.164440] RBP: 00007fc6a4bc4020 R08: 0000000000000000 R09: 0000000000000000 [ 166.164451] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6a4bc402c [ 166.164457] R13: 00007ffdee4fea0f R14: 00007fc6a2005300 R15: 0000000000022000 [ 166.164473] [ 166.164477] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 166.164483] kmemleak: comm "syz-executor.4", pid 284, jiffies 4294832638 [ 166.164490] kmemleak: min_count = 1 [ 166.164494] kmemleak: count = 0 [ 166.164497] kmemleak: flags = 0x21 [ 166.164501] kmemleak: checksum = 0 [ 166.164504] kmemleak: backtrace: [ 166.164508] pcpu_alloc_noprof+0x87a/0x1170 [ 166.164522] mm_init+0x99b/0x1170 [ 166.164530] copy_process+0x3ab7/0x73c0 [ 166.164540] kernel_clone+0xea/0x7f0 [ 166.164550] __do_sys_clone+0xce/0x120 [ 166.164559] do_syscall_64+0xbf/0x360 [ 166.164567] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:27:25 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg2\x00'}) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:27:25 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$HIDIOCGRAWNAME(r2, 0x80404804, &(0x7f00000001c0)) syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) 05:27:25 executing program 7: sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x104, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x5, 0x44}}}}, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffc00}}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000042}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x78, 0x0, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x5c}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000040}, 0x24040042) io_uring_setup(0x73cc, &(0x7f0000000300)={0x0, 0xecf2, 0x0, 0x3, 0x175}) r2 = getpgrp(0x0) ptrace$poke(0x4, r2, &(0x7f0000000380), 0x681f) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={0x0, @xdp={0x2c, 0x0, 0x0, 0x2d}, @nfc={0x27, 0x0, 0x2, 0x1}, @xdp={0x2c, 0x6, 0x0, 0x23}, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x8000, 0x8}) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x5c, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}, @ETHTOOL_A_RINGS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x7}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40c1}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r3) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000800)={&(0x7f0000000700), 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x48, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000880}, 0x24004810) r5 = openat$cgroup_pressure(r3, &(0x7f0000000840)='memory.pressure\x00', 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000880)={0x2000000a}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000a00), 0x500, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000a80)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) [ 166.307436] kmemleak: Found object by alias at 0x607f1a639b70 [ 166.307458] CPU: 0 UID: 0 PID: 4316 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 166.307476] Tainted: [W]=WARN [ 166.307483] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 166.307490] Call Trace: [ 166.307495] [ 166.307500] dump_stack_lvl+0xca/0x120 [ 166.307523] __lookup_object+0x94/0xb0 [ 166.307540] delete_object_full+0x27/0x70 [ 166.307555] free_percpu+0x30/0x1160 [ 166.307572] ? arch_uprobe_clear_state+0x16/0x140 [ 166.307591] futex_hash_free+0x38/0xc0 [ 166.307605] mmput+0x2d3/0x390 [ 166.307623] do_exit+0x79d/0x2970 [ 166.307640] ? __pfx_do_exit+0x10/0x10 [ 166.307654] ? find_held_lock+0x2b/0x80 [ 166.307672] ? get_signal+0x835/0x2340 [ 166.307691] do_group_exit+0xd3/0x2a0 [ 166.307706] get_signal+0x2315/0x2340 [ 166.307723] ? put_task_stack+0xd2/0x240 [ 166.307737] ? __pfx_get_signal+0x10/0x10 [ 166.307753] ? __schedule+0xe91/0x3590 [ 166.307772] arch_do_signal_or_restart+0x80/0x790 [ 166.307789] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 166.307805] ? __x64_sys_futex+0x1c9/0x4d0 [ 166.307817] ? __x64_sys_futex+0x1d2/0x4d0 [ 166.307830] ? __x64_sys_openat+0x142/0x200 [ 166.307847] ? __pfx___x64_sys_futex+0x10/0x10 [ 166.307865] exit_to_user_mode_loop+0x8b/0x110 [ 166.307878] do_syscall_64+0x2f7/0x360 [ 166.307890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.307902] RIP: 0033:0x7fb4e0093b19 [ 166.307910] Code: Unable to access opcode bytes at 0x7fb4e0093aef. [ 166.307915] RSP: 002b:00007fb4dd609218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.307926] RAX: 0000000000000001 RBX: 00007fb4e01a6f68 RCX: 00007fb4e0093b19 [ 166.307933] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb4e01a6f6c [ 166.307940] RBP: 00007fb4e01a6f60 R08: 0000000000000016 R09: 0000000000000000 [ 166.307947] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fb4e01a6f6c [ 166.307960] R13: 00007ffe67f0575f R14: 00007fb4dd609300 R15: 0000000000022000 [ 166.307976] [ 166.307979] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 166.307986] kmemleak: comm "syz-executor.0", pid 4306, jiffies 4294832789 [ 166.307993] kmemleak: min_count = 1 [ 166.307996] kmemleak: count = 0 [ 166.308000] kmemleak: flags = 0x21 [ 166.308004] kmemleak: checksum = 0 [ 166.308007] kmemleak: backtrace: [ 166.308011] pcpu_alloc_noprof+0x87a/0x1170 [ 166.308025] mm_init+0x99b/0x1170 [ 166.308034] copy_process+0x3ab7/0x73c0 [ 166.308043] kernel_clone+0xea/0x7f0 [ 166.308053] __do_sys_fork+0x94/0xd0 [ 166.308063] do_syscall_64+0xbf/0x360 [ 166.308071] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:27:25 executing program 5: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000d180)={@multicast2, @remote, 0x0}, &(0x7f000000d1c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f000000d300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d2c0)={&(0x7f000000d200)={0xb4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8880}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000000d340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f000000d6c0)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000d680)={&(0x7f000000d3c0)={0x288, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x126, @remote, 0x101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7e62f1253b1b033f6644b7d98fc17587a28a8b8707167209fd013797622cb11"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x79c9}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0xc090}, 0x4000050) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f000000d7c0)={&(0x7f000000d700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000d780)={&(0x7f000000d740)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) bind$bt_sco(r1, &(0x7f000000d800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) prctl$PR_GET_TSC(0x19, &(0x7f000000d840)) pipe(&(0x7f000000d880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r3, &(0x7f000000d8c0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f000000d900)=""/53, &(0x7f000000d940)=0x35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_genetlink_get_family_id$smc(&(0x7f000000d980), r1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f000000da00)={0x0, @xdp={0x2c, 0x0, r0, 0x36}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2={0x1f, 0x7, @none, 0x5, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x987f, &(0x7f000000d9c0)='ipvlan1\x00', 0x1ee4, 0x4, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f000000da80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f000000dac0)={{0x1, 0x1, 0x18, r1, {0x8ad}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f000000db00)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 05:27:25 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:27:25 executing program 0: capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x7, 0xb8, 0x3cf, 0x5, 0x100, 0x80}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x4, 0x80000000, 0x3, 0x5, 0x0, 0x1}) r0 = getpgrp(0xffffffffffffffff) capset(&(0x7f0000000100)={0x20071026, r0}, &(0x7f0000000140)={0x10000, 0xb91, 0xb57, 0x8, 0x1eb1, 0x400}) capset(&(0x7f0000000180)={0x19980330, r0}, &(0x7f00000001c0)={0x0, 0x80000001, 0x6, 0xc0000000, 0x0, 0x7}) syz_genetlink_get_family_id$smc(&(0x7f0000000200), 0xffffffffffffffff) r1 = getpgrp(r0) capget(&(0x7f0000000240)={0x20071026, r1}, &(0x7f0000000280)={0x1, 0x10000, 0x8, 0x20000, 0x3, 0x9}) fork() ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc8, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x1df3624dee1556c4}, 0x48001) r3 = shmget(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f00000004c0)=""/220) restart_syscall() fork() 05:27:25 executing program 3: r0 = fork() r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x2, 0x109e01) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r0, 0x7, r1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0xffffffff}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0xedcb47efec5cb8dc) r2 = getpgrp(r0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r2, 0x7, r3, &(0x7f00000000c0)={r4, r1, 0xfff}) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100)=0x20, 0x4) r5 = getpgrp(r0) getpgrp(r5) fork() epoll_create1(0x80000) 05:27:25 executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008d0}, 0x40001) syz_genetlink_get_family_id$smc(&(0x7f00000014c0), 0xffffffffffffffff) pipe(&(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20040800}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x31}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27e}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}]}, 0x3c}, 0x1, 0x0, 0x0, 0x100488c0}, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000001640), r1) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), r1) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000001800)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xa8, r3, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x805}, 0x4c01d) syz_io_uring_setup(0x7200, &(0x7f0000001840)={0x0, 0x1736, 0xf4367ac21b7dbde, 0x3, 0x19f, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f00000018c0), &(0x7f0000001900)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000001940)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000001ac0), 0xffffffffffffffff) 05:27:25 executing program 6: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x1, 0x800) ioctl$HIDIOCGRAWPHYS(r0, 0x80404805, &(0x7f0000000040)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f0000000080)) ioctl$HIDIOCGRDESCSIZE(r0, 0x80044801, &(0x7f00000000c0)) r1 = io_uring_setup(0x3de9, &(0x7f0000000100)={0x0, 0x2e41, 0x1, 0x3, 0x29b}) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$hidraw(&(0x7f0000000480), 0xffffffff, 0x501201) [ 166.452811] kmemleak: Found object by alias at 0x607f1a639b74 [ 166.452839] CPU: 1 UID: 0 PID: 4294 Comm: syz-executor.2 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 166.452872] Tainted: [W]=WARN [ 166.452878] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 166.452890] Call Trace: [ 166.452897] [ 166.452905] dump_stack_lvl+0xca/0x120 [ 166.452944] __lookup_object+0x94/0xb0 [ 166.452976] delete_object_full+0x27/0x70 [ 166.453006] free_percpu+0x30/0x1160 [ 166.453034] ? arch_uprobe_clear_state+0x16/0x140 [ 166.453069] futex_hash_free+0x38/0xc0 [ 166.453094] mmput+0x2d3/0x390 [ 166.453127] do_exit+0x79d/0x2970 [ 166.453151] ? signal_wake_up_state+0x85/0x120 [ 166.453178] ? zap_other_threads+0x2b9/0x3a0 [ 166.453206] ? __pfx_do_exit+0x10/0x10 [ 166.453229] ? do_group_exit+0x1c3/0x2a0 [ 166.453253] ? lock_release+0xc8/0x290 [ 166.453283] do_group_exit+0xd3/0x2a0 [ 166.453310] __x64_sys_exit_group+0x3e/0x50 [ 166.453335] x64_sys_call+0x18c5/0x18d0 [ 166.453362] do_syscall_64+0xbf/0x360 [ 166.453382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.453403] RIP: 0033:0x7f810899bb19 [ 166.453418] Code: Unable to access opcode bytes at 0x7f810899baef. [ 166.453428] RSP: 002b:00007ffce5349958 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 166.453447] RAX: ffffffffffffffda RBX: 000000000000001e RCX: 00007f810899bb19 [ 166.453468] RDX: 00007f810894e72b RSI: ffffffffffffffbc RDI: 0000000000000000 [ 166.453481] RBP: 0000000000000000 R08: 0000001b2d022d4c R09: 0000000000000000 [ 166.453493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.453505] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffce5349a40 [ 166.453534] [ 166.453541] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 166.453553] kmemleak: comm "syz-executor.5", pid 286, jiffies 4294832966 [ 166.453565] kmemleak: min_count = 1 [ 166.453572] kmemleak: count = 0 [ 166.453579] kmemleak: flags = 0x21 [ 166.453586] kmemleak: checksum = 0 [ 166.453593] kmemleak: backtrace: [ 166.453599] pcpu_alloc_noprof+0x87a/0x1170 [ 166.453626] mm_init+0x99b/0x1170 [ 166.453641] copy_process+0x3ab7/0x73c0 [ 166.453659] kernel_clone+0xea/0x7f0 [ 166.453676] __do_sys_clone+0xce/0x120 [ 166.453695] do_syscall_64+0xbf/0x360 [ 166.453710] entry_SYSCALL_64_after_hwframe+0x77/0x7f 05:27:25 executing program 4: r0 = shmget(0x2, 0x3000, 0x2, &(0x7f0000ffb000/0x3000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/92) r1 = shmget(0x3, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000080)=""/90) r2 = shmget(0x1, 0x2000, 0x80, &(0x7f0000ffe000/0x2000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000100)=""/161) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000009c0)=""/55) 05:27:25 executing program 2: sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x108, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x33}}}}, [@NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x5, 0x6}, {0xef, 0x3}, {0x9d, 0x6}], "0c9e9dfffffd3bf6"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x3}, {0x85, 0x2}, {0x7, 0x3}], "67474613a2fd5b27"}}, @NL80211_ATTR_QOS_MAP={0x1a, 0xc7, {[{0x81, 0x3}, {0x8}, {0x3, 0x6}, {0x80, 0x3}, {0xf, 0x2}, {0x8, 0x3}, {0x5}], "d54ae00913fce94c"}}, @NL80211_ATTR_QOS_MAP={0x34, 0xc7, {[{0x2, 0x5}, {0x6}, {0x40, 0x5}, {0xff, 0x3}, {0x95, 0x4}, {0x7, 0x2}, {0xca, 0x6}, {0x81, 0x3}, {0x5, 0x7}, {0x6b, 0x3}, {0xff, 0x4}, {0x6, 0x3}, {0xff, 0x2}, {0x9}, {0x3f, 0x1}, {0x7, 0x6}, {}, {0x0, 0x6}, {0x7f, 0x3}, {0x81, 0x3}], "428154012a7b10c6"}}, @NL80211_ATTR_QOS_MAP={0xe, 0xc7, {[{0x7, 0x6}], "6db33e16e72b6a0b"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x2, 0x5}, {0x9, 0x2}, {0x5, 0x1}, {0x7, 0x6}, {0x1, 0x7}, {0xfa}, {0xfc, 0x2}, {0x0, 0x5}, {0x59, 0x2}, {0x7f, 0x5}, {0x3, 0x6}, {0x7, 0x7}, {0x7f, 0x2}, {0x7c, 0x1}, {0x36}, {0xaa, 0x6}, {0xf0, 0x7}], "ce412b6c7a2d902f"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40}, {0xfd, 0x6}, {0x40, 0x1}, {0x88, 0x7}, {0x2, 0x7}, {0xfc, 0x1}, {0x3f, 0x7}, {0x5, 0x7}, {0x0, 0x2}, {0x1, 0x1}, {0xbd, 0x1}, {0x1, 0x2}, {0xf9, 0x2}, {0x4, 0x1}], "166b62282c1a2991"}}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x8095) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x3}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x8000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0x10000}}, './file0\x00'}) pipe(&(0x7f0000000480)) recvmmsg(0xffffffffffffffff, &(0x7f0000006780)=[{{&(0x7f0000004080)=@ax25={{}, [@netrom, @rose, @remote, @default, @remote, @default, @default, @default]}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004100)=""/236, 0xec}, {&(0x7f0000004200)=""/141, 0x8d}, {&(0x7f00000042c0)=""/93, 0x5d}], 0x3, &(0x7f0000004380)=""/168, 0xa8}}, {{0x0, 0x0, &(0x7f0000004800)=[{&(0x7f0000004440)=""/109, 0x6d}, {&(0x7f00000044c0)=""/237, 0xed}, {&(0x7f00000045c0)=""/250, 0xfa}, {&(0x7f00000046c0)=""/218, 0xda}, {&(0x7f00000047c0)=""/29, 0x1d}], 0x5, &(0x7f0000004880)=""/66, 0x42}, 0x1}, {{0x0, 0x0, &(0x7f0000005d80)=[{&(0x7f0000004900)=""/82, 0x52}, {&(0x7f0000004980)=""/189, 0xbd}, {&(0x7f0000004a40)=""/37, 0x25}, {&(0x7f0000004a80)=""/81, 0x51}, {&(0x7f0000004b00)=""/221, 0xdd}, {&(0x7f0000004c00)=""/243, 0xf3}, {&(0x7f0000004d00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/128, 0x80}], 0x8, &(0x7f0000005e00)=""/165, 0xa5}, 0x7}, {{&(0x7f0000005ec0)=@can, 0x80, &(0x7f00000065c0)=[{&(0x7f0000005f40)=""/228, 0xe4}, {&(0x7f0000006040)=""/91, 0x5b}, {&(0x7f00000060c0)=""/226, 0xe2}, {&(0x7f00000061c0)=""/216, 0xd8}, {&(0x7f00000062c0)=""/55, 0x37}, {&(0x7f0000006300)=""/183, 0xb7}, {&(0x7f00000063c0)=""/177, 0xb1}, {&(0x7f0000006480)=""/137, 0x89}, {&(0x7f0000006540)=""/76, 0x4c}], 0x9, &(0x7f0000006680)=""/212, 0xd4}, 0x400000}], 0x4, 0x40, &(0x7f0000006880)) 05:27:25 executing program 5: sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x3c}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f000000d180)={@multicast2, @remote, 0x0}, &(0x7f000000d1c0)=0xc) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f000000d300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000d2c0)={&(0x7f000000d200)={0xb4, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8880}, 0x50) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f000000d340)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f000000d6c0)={&(0x7f000000d380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000d680)={&(0x7f000000d3c0)={0x288, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x114, 0x8, 0x0, 0x1, [{0xfc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x13c, 0x8, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x5}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010101}}]}, {0x18, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}]}, {0xac, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x5, @private1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x126, @remote, 0x101}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c7e62f1253b1b033f6644b7d98fc17587a28a8b8707167209fd013797622cb11"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x79c9}]}]}]}, 0x288}, 0x1, 0x0, 0x0, 0xc090}, 0x4000050) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f000000d7c0)={&(0x7f000000d700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000d780)={&(0x7f000000d740)={0x1c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20004000) bind$bt_sco(r1, &(0x7f000000d800)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) prctl$PR_GET_TSC(0x19, &(0x7f000000d840)) pipe(&(0x7f000000d880)={0xffffffffffffffff, 0xffffffffffffffff}) connect$bt_sco(r3, &(0x7f000000d8c0)={0x1f, @none}, 0x8) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f000000d900)=""/53, &(0x7f000000d940)=0x35) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_genetlink_get_family_id$smc(&(0x7f000000d980), r1) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f000000da00)={0x0, @xdp={0x2c, 0x0, r0, 0x36}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, @l2={0x1f, 0x7, @none, 0x5, 0x1}, 0x6, 0x0, 0x0, 0x0, 0x987f, &(0x7f000000d9c0)='ipvlan1\x00', 0x1ee4, 0x4, 0x4}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f000000da80)={{0x1, 0x1, 0x18, r1, {0x8}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f000000dac0)={{0x1, 0x1, 0x18, r1, {0x8ad}}, './file1\x00'}) [ 166.595117] kmemleak: Found object by alias at 0x607f1a639b70 [ 166.595142] CPU: 0 UID: 0 PID: 4343 Comm: syz-executor.6 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 166.595161] Tainted: [W]=WARN [ 166.595164] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 166.595171] Call Trace: [ 166.595175] [ 166.595180] dump_stack_lvl+0xca/0x120 [ 166.595205] __lookup_object+0x94/0xb0 [ 166.595222] delete_object_full+0x27/0x70 [ 166.595237] free_percpu+0x30/0x1160 [ 166.595254] ? arch_uprobe_clear_state+0x16/0x140 [ 166.595274] futex_hash_free+0x38/0xc0 [ 166.595288] mmput+0x2d3/0x390 [ 166.595307] do_exit+0x79d/0x2970 [ 166.595320] ? lock_release+0xc8/0x290 [ 166.595337] ? __pfx_do_exit+0x10/0x10 [ 166.595350] ? find_held_lock+0x2b/0x80 [ 166.595367] ? get_signal+0x835/0x2340 [ 166.595386] do_group_exit+0xd3/0x2a0 [ 166.595401] get_signal+0x2315/0x2340 [ 166.595423] ? __pfx_get_signal+0x10/0x10 [ 166.595438] ? do_futex+0x135/0x370 [ 166.595456] ? __pfx_do_futex+0x10/0x10 [ 166.595470] arch_do_signal_or_restart+0x80/0x790 [ 166.595488] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 166.595503] ? __x64_sys_futex+0x1c9/0x4d0 [ 166.595515] ? __x64_sys_futex+0x1d2/0x4d0 [ 166.595529] ? __x64_sys_openat+0x142/0x200 [ 166.595545] ? __pfx___x64_sys_futex+0x10/0x10 [ 166.595563] exit_to_user_mode_loop+0x8b/0x110 [ 166.595576] do_syscall_64+0x2f7/0x360 [ 166.595587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.595599] RIP: 0033:0x7fb4e0093b19 [ 166.595608] Code: Unable to access opcode bytes at 0x7fb4e0093aef. [ 166.595613] RSP: 002b:00007fb4dd609218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.595625] RAX: fffffffffffffe00 RBX: 00007fb4e01a6f68 RCX: 00007fb4e0093b19 [ 166.595632] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb4e01a6f68 [ 166.595639] RBP: 00007fb4e01a6f60 R08: 0000000000000000 R09: 0000000000000000 [ 166.595646] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb4e01a6f6c [ 166.595652] R13: 00007ffe67f0575f R14: 00007fb4dd609300 R15: 0000000000022000 [ 166.595668] [ 166.595672] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 166.595679] kmemleak: comm "syz-executor.2", pid 283, jiffies 4294833206 [ 166.595685] kmemleak: min_count = 1 [ 166.595689] kmemleak: count = 0 [ 166.595693] kmemleak: flags = 0x21 [ 166.595696] kmemleak: checksum = 0 [ 166.595700] kmemleak: backtrace: [ 166.595704] pcpu_alloc_noprof+0x87a/0x1170 [ 166.595718] mm_init+0x99b/0x1170 [ 166.595726] copy_process+0x3ab7/0x73c0 [ 166.595735] kernel_clone+0xea/0x7f0 [ 166.595745] __do_sys_clone+0xce/0x120 [ 166.595755] do_syscall_64+0xbf/0x360 [ 166.595763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.678826] kmemleak: Found object by alias at 0x607f1a639b6c [ 166.678855] CPU: 1 UID: 0 PID: 4340 Comm: syz-executor.7 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 166.678887] Tainted: [W]=WARN [ 166.678894] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 166.678906] Call Trace: [ 166.678912] [ 166.678921] dump_stack_lvl+0xca/0x120 [ 166.678960] __lookup_object+0x94/0xb0 [ 166.678989] delete_object_full+0x27/0x70 [ 166.679018] free_percpu+0x30/0x1160 [ 166.679046] ? arch_uprobe_clear_state+0x16/0x140 [ 166.679081] futex_hash_free+0x38/0xc0 [ 166.679106] mmput+0x2d3/0x390 [ 166.679147] do_exit+0x79d/0x2970 [ 166.679171] ? lock_release+0xc8/0x290 [ 166.679200] ? __pfx_do_exit+0x10/0x10 [ 166.679226] ? find_held_lock+0x2b/0x80 [ 166.679256] ? get_signal+0x835/0x2340 [ 166.679292] do_group_exit+0xd3/0x2a0 [ 166.679318] get_signal+0x2315/0x2340 [ 166.679353] ? trace_irq_enable.constprop.0+0xc2/0x100 [ 166.679380] ? __pfx_get_signal+0x10/0x10 [ 166.679409] ? do_futex+0x135/0x370 [ 166.679433] ? __pfx_do_futex+0x10/0x10 [ 166.679460] arch_do_signal_or_restart+0x80/0x790 [ 166.679491] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 166.679520] ? __x64_sys_futex+0x1c9/0x4d0 [ 166.679542] ? __x64_sys_futex+0x1d2/0x4d0 [ 166.679569] ? __pfx___x64_sys_futex+0x10/0x10 [ 166.679592] ? selinux_file_ioctl+0xb9/0x280 [ 166.679618] ? __pfx_autofs_dev_ioctl+0x10/0x10 [ 166.679646] exit_to_user_mode_loop+0x8b/0x110 [ 166.679668] do_syscall_64+0x2f7/0x360 [ 166.679690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.679711] RIP: 0033:0x7fc6a4ab0b19 [ 166.679726] Code: Unable to access opcode bytes at 0x7fc6a4ab0aef. [ 166.679735] RSP: 002b:00007fc6a2005218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 166.679755] RAX: fffffffffffffe00 RBX: 00007fc6a4bc4028 RCX: 00007fc6a4ab0b19 [ 166.679769] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc6a4bc4028 [ 166.679781] RBP: 00007fc6a4bc4020 R08: 0000000000000000 R09: 0000000000000000 [ 166.679794] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc6a4bc402c [ 166.679806] R13: 00007ffdee4fea0f R14: 00007fc6a2005300 R15: 0000000000022000 [ 166.679835] [ 166.679842] kmemleak: Object (percpu) 0x607f1a639b68 (size 16): [ 166.679854] kmemleak: comm "syz-executor.2", pid 283, jiffies 4294833206 [ 166.679866] kmemleak: min_count = 1 [ 166.679873] kmemleak: count = 0 [ 166.679880] kmemleak: flags = 0x21 [ 166.679886] kmemleak: checksum = 0 [ 166.679893] kmemleak: backtrace: [ 166.679899] pcpu_alloc_noprof+0x87a/0x1170 [ 166.679926] mm_init+0x99b/0x1170 [ 166.679940] copy_process+0x3ab7/0x73c0 [ 166.679970] kernel_clone+0xea/0x7f0 [ 166.679988] __do_sys_clone+0xce/0x120 [ 166.680006] do_syscall_64+0xbf/0x360 [ 166.680021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.923354] watchdog: BUG: soft lockup - CPU#0 stuck for 26s! [syz-executor.4:4356] [ 192.923386] Modules linked in: [ 192.923399] irq event stamp: 187156 [ 192.923407] hardirqs last enabled at (187155): [] irqentry_exit+0x3b/0x90 [ 192.923450] hardirqs last disabled at (187156): [] sysvec_apic_timer_interrupt+0xf/0x80 [ 192.923479] softirqs last enabled at (187132): [] handle_softirqs+0x50c/0x770 [ 192.923514] softirqs last disabled at (187091): [] __irq_exit_rcu+0xc4/0x100 [ 192.923555] CPU: 0 UID: 0 PID: 4356 Comm: syz-executor.4 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 192.923584] Tainted: [W]=WARN [ 192.923590] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 192.923601] RIP: 0010:smp_call_function_many_cond+0xa38/0x1110 [ 192.923636] Code: 31 ff 83 e5 01 89 ee e8 f6 61 0b 00 85 ed 74 43 4d 89 ec 4c 89 ed 49 c1 ec 03 83 e5 07 4d 01 fc 83 c5 03 e8 aa 66 0b 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 d5 04 00 00 8b 43 08 31 [ 192.923654] RSP: 0018:ffff88803c04f6f8 EFLAGS: 00000293 [ 192.923669] RAX: 0000000000000000 RBX: ffff88806cf3c300 RCX: ffffffff816880fc [ 192.923682] RDX: ffff88803b6fb700 RSI: ffffffff816880d6 RDI: 0000000000000005 [ 192.923694] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000000000000001 [ 192.923705] R10: 0000000000000001 R11: 1ffff1100d9c6bb1 R12: ffffed100d9e7861 [ 192.923717] R13: ffff88806cf3c308 R14: 0000000000000001 R15: dffffc0000000000 [ 192.923733] FS: 0000000000000000(0000) GS:ffff8880e55dd000(0000) knlGS:0000000000000000 [ 192.923752] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.923764] CR2: 00007fffff8c3ff8 CR3: 000000003afca000 CR4: 0000000000350ef0 [ 192.923776] Call Trace: [ 192.923782] [ 192.923805] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 192.923839] ? free_pgd_range+0x29e/0x1330 [ 192.923866] ? __pfx_flush_tlb_func+0x10/0x10 [ 192.923888] on_each_cpu_cond_mask+0x57/0xa0 [ 192.923920] kvm_flush_tlb_multi+0x1e8/0x320 [ 192.923943] ? __pfx_kvm_flush_tlb_multi+0x10/0x10 [ 192.923963] ? free_pgtables+0x444/0xbb0 [ 192.923993] flush_tlb_mm_range+0x3fc/0x1420 [ 192.924019] ? down_write+0x119/0x1f0 [ 192.924039] tlb_finish_mmu+0x3d5/0x7e0 [ 192.924072] exit_mmap+0x3a4/0xaa0 [ 192.924099] ? uprobe_clear_state+0xfc/0x410 [ 192.924123] ? __pfx_exit_mmap+0x10/0x10 [ 192.924155] ? __pfx___mutex_lock+0x10/0x10 [ 192.924195] ? arch_uprobe_clear_state+0x16/0x140 [ 192.924239] mmput+0xd5/0x390 [ 192.924269] do_exit+0x79d/0x2970 [ 192.924291] ? lock_release+0xc8/0x290 [ 192.924318] ? __pfx_do_exit+0x10/0x10 [ 192.924341] ? find_held_lock+0x2b/0x80 [ 192.924368] ? get_signal+0x835/0x2340 [ 192.924400] do_group_exit+0xd3/0x2a0 [ 192.924425] get_signal+0x2315/0x2340 [ 192.924457] ? ksys_shmctl.constprop.0+0x1b1/0x390 [ 192.924485] ? __pfx_get_signal+0x10/0x10 [ 192.924512] ? do_futex+0x135/0x370 [ 192.924535] ? __pfx_do_futex+0x10/0x10 [ 192.924555] ? lock_acquire+0x15e/0x2f0 [ 192.924579] arch_do_signal_or_restart+0x80/0x790 [ 192.924608] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 192.924635] ? __x64_sys_futex+0x1c9/0x4d0 [ 192.924655] ? __x64_sys_futex+0x1d2/0x4d0 [ 192.924679] ? __pfx___x64_sys_futex+0x10/0x10 [ 192.924710] exit_to_user_mode_loop+0x8b/0x110 [ 192.924731] do_syscall_64+0x2f7/0x360 [ 192.924750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.924770] RIP: 0033:0x7f212b576b19 [ 192.924785] Code: Unable to access opcode bytes at 0x7f212b576aef. [ 192.924793] RSP: 002b:00007f2128aec218 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 192.924811] RAX: fffffffffffffe00 RBX: 00007f212b689f68 RCX: 00007f212b576b19 [ 192.924824] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f212b689f68 [ 192.924835] RBP: 00007f212b689f60 R08: 0000000000000000 R09: 0000000000000000 [ 192.924846] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f212b689f6c [ 192.924858] R13: 00007ffc8cd47d6f R14: 00007f2128aec300 R15: 0000000000022000 [ 192.924885] [ 192.924892] Sending NMI from CPU 0 to CPUs 1: [ 192.986669] NMI backtrace for cpu 1 [ 192.986692] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G W 6.17.0-rc3-next-20250829 #1 PREEMPT(voluntary) [ 192.986710] Tainted: [W]=WARN [ 192.986713] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 192.986720] RIP: 0010:__mm_cid_try_get.constprop.0+0x393/0x490 [ 192.986743] Code: 89 c3 89 c2 89 54 24 68 0f b6 55 00 84 d2 74 09 80 fa 03 0f 8e b0 00 00 00 41 8b 95 d8 00 00 00 39 da 0f 87 38 ff ff ff f3 90 <41> 80 3e 00 0f 85 ad 00 00 00 49 8b 04 24 48 83 f8 ff 75 ba ba 40 [ 192.986753] RSP: 0018:ffff888009747b28 EFLAGS: 00000046 [ 192.986763] RAX: 0000000000000002 RBX: 0000000000000002 RCX: dffffc0000000000 [ 192.986769] RDX: 0000000000000002 RSI: 0000000000000008 RDI: ffff88803e4a9450 [ 192.986775] RBP: ffffed1007c9516b R08: 0000000000000001 R09: ffffed1007c9528a [ 192.986782] R10: ffff88803e4a9457 R11: 1ffff1100d9e6f7b R12: ffff88803e4a9450 [ 192.986788] R13: ffff88803e4a8a80 R14: ffffed1007c9528a R15: ffff88803e4a8b44 [ 192.986798] FS: 0000000000000000(0000) GS:ffff8880e56dd000(0000) knlGS:0000000000000000 [ 192.986807] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.986814] CR2: 00007f173f402344 CR3: 000000003cdac000 CR4: 0000000000350ef0 [ 192.986821] Call Trace: [ 192.986827] [ 192.986835] ? __pfx___mm_cid_try_get.constprop.0+0x10/0x10 [ 192.986848] ? lock_is_held_type+0x9e/0x120 [ 192.986865] ? update_load_avg+0x17d/0x1ef0 [ 192.986876] ? lock_is_held_type+0x9e/0x120 [ 192.986890] mm_cid_get.isra.0+0x16a/0x570 [ 192.986905] ? set_next_entity+0x331/0x940 [ 192.986916] ? __pfx_mm_cid_get.isra.0+0x10/0x10 [ 192.986932] ? switch_mm_irqs_off+0x534/0x6f0 [ 192.986945] __schedule+0x1744/0x3590 [ 192.986961] ? __pfx___schedule+0x10/0x10 [ 192.986974] ? lock_acquire+0x15e/0x2f0 [ 192.986990] ? find_held_lock+0x2b/0x80 [ 192.987007] ? schedule+0x2c7/0x390 [ 192.987020] ? lock_release+0xc8/0x290 [ 192.987032] schedule+0xdb/0x390 [ 192.987044] smpboot_thread_fn+0x67c/0x9d0 [ 192.987061] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 192.987077] kthread+0x3c8/0x740 [ 192.987088] ? __pfx_kthread+0x10/0x10 [ 192.987098] ? ret_from_fork+0x23/0x430 [ 192.987114] ? lock_release+0xc8/0x290 [ 192.987126] ? __pfx_kthread+0x10/0x10 [ 192.987136] ret_from_fork+0x34b/0x430 [ 192.987151] ? __pfx_kthread+0x10/0x10 [ 192.987162] ret_from_fork_asm+0x1a/0x30 [ 192.987180] VM DIAGNOSIS: 05:27:52 Registers: info registers vcpu 0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff828e3230 RDI=ffffffff88724180 RBP=ffffffff88724140 RSP=ffff88806ce08930 R8 =0000000000000001 R9 =ffffed100d9c1117 R10=0000000000000000 R11=0000000000000001 R12=0000000000000021 R13=ffffffff88724190 R14=ffffffff88724140 R15=ffffffff88724400 RIP=ffffffff828e3285 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e55dd000 00000000 00000000 LDT=0000 fffffe5a00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffff8c3ff8 CR3=000000003afca000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000002 RBX=0000000000000002 RCX=dffffc0000000000 RDX=0000000000000002 RSI=0000000000000008 RDI=ffff88803e4a9450 RBP=ffffed1007c9516b RSP=ffff888009747b28 R8 =0000000000000001 R9 =ffffed1007c9528a R10=ffff88803e4a9457 R11=1ffff1100d9e6f7b R12=ffff88803e4a9450 R13=ffff88803e4a8a80 R14=ffffed1007c9528a R15=ffff88803e4a8b44 RIP=ffffffff81467503 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e56dd000 00000000 00000000 LDT=0000 fffffe4f00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f173f402344 CR3=000000003cdac000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000