Warning: Permanently added '[localhost]:6481' (ECDSA) to the list of known hosts. 2022/10/02 04:56:53 fuzzer started 2022/10/02 04:56:54 dialing manager at localhost:35095 syzkaller login: [ 40.785398] cgroup: Unknown subsys name 'net' [ 40.882652] cgroup: Unknown subsys name 'rlimit' 2022/10/02 04:57:09 syscalls: 200 2022/10/02 04:57:09 code coverage: enabled 2022/10/02 04:57:09 comparison tracing: enabled 2022/10/02 04:57:09 extra coverage: enabled 2022/10/02 04:57:09 setuid sandbox: enabled 2022/10/02 04:57:09 namespace sandbox: enabled 2022/10/02 04:57:09 Android sandbox: enabled 2022/10/02 04:57:09 fault injection: enabled 2022/10/02 04:57:09 leak checking: enabled 2022/10/02 04:57:09 net packet injection: enabled 2022/10/02 04:57:09 net device setup: enabled 2022/10/02 04:57:09 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/02 04:57:09 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/02 04:57:09 USB emulation: enabled 2022/10/02 04:57:09 hci packet injection: enabled 2022/10/02 04:57:09 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/02 04:57:09 802.15.4 emulation: enabled 2022/10/02 04:57:09 fetching corpus: 0, signal 0/0 (executing program) 2022/10/02 04:57:11 starting 8 fuzzer processes 04:57:11 executing program 0: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x3) setns(r1, 0x2000000) setns(r0, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) setns(r0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x20000000) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xee00) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000001c0)={'ip6gretap0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x800) r4 = io_uring_setup(0x4cf3, &(0x7f0000000300)={0x0, 0x7042, 0x4, 0x3, 0x2e4}) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x8) statx(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x6000, 0x10, &(0x7f0000000440)) 04:57:11 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x10000, 0x140) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) process_madvise(r1, &(0x7f00000004c0)=[{&(0x7f0000000080)="5c389caf4c0eaece262071eb10f415245d476a898f0b24a36dc573461b749da861d96e64457eac33729e23dc66", 0x2d}, {&(0x7f00000000c0)="7855b3600ef9050e560b14185a79fea1b10222591db422849654069d009c00b0244ad9aacfaba6755b94da7fb0d80c8e57463a86d04b9f7dc740a3ee7594da6d59135771d2a7efcd67ab3b0f5d9113e0a64072fdabd0f4269d8716035b53a3cd29dd4462cda873b85fe32f21354c11af50a1ad72bb5b80bd5c99726ff7f3dc2bdb5e2f3c04b57577ce8c", 0x8a}, {&(0x7f0000000180)="e742287a30e52981e6e0ae55f532815c60547058df37f3e2e41416c2a9a3de17ab3532af208759c4884c96b97d7b80817ac9fa5597515edd489e647a8a61e228904fcbcac2c4d3a74446c388040acf377f5c0ca33931a868a6cb1312a5706dd7fd33040a546e73a914aa38e4d4f433d7b3c72a2bd187397936b19708f46300fa53609356f3185503fd0a6d85318076bb9df1192612cb79d974964085c6660be2bf9e2452c4392ac50e6fbcdbb7aae23e6d5cc9db54d87609cf20863bf74a3b306d49bc0c9d6e3fdd38267294ca145bf2a933f65757e11aee9c448de175557e8f9490", 0xe2}, {&(0x7f0000000280)="e7996a0abf37ec27f9299af8c4add3cdaab1641ee5a06d46b961b90b683c9c964125b130144f8aa2ae7fc8e358048ef85a5b0125282fee8491ff0970253793ec0a223d67", 0x44}, {&(0x7f0000000300)="e2f4dd9e61732653b3a7406a97f1b0429d7481a26245b466aadff2d4da131e0ba7da1b2a0c6f061b174678837bb86ec32df41e60a3ba679b1d7c098949b1e12c2974f6b94f8baa55a34d26a46771abf5b8833ed0c16cb8f5c0c47d73ebcedf208faa7d794d890848cc2448d7c1eb5b08624ab548adca4e51c2c117878743bd60f7b27600f8e3fb", 0x87}, {&(0x7f00000003c0)="c835e9b2dc814ffdc657dc15bea249b91df4b60293245fd4b1364bf7c112c0fd7d39e2477c7ea8e26fd5f04ae5f97ab1ffce1120dae1e713551b8f45b41866efb74511801accc7a6a901a7861c", 0x4d}, {&(0x7f0000000440)="7bfc039bace010342ff59378c150f30714cda0fd7bfbc6b20b10dcc3ff4401f6062bf54cc6b70488ec52ac3d4f14d74ed7cab11f73d5b704292aaf10c4c80025629ceb544e4ab40c6c757e8e211396e6e3a84951", 0x54}], 0x7, 0x3, 0x0) getdents64(r0, &(0x7f0000000540)=""/94, 0x5e) r2 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x6, 0x200) pidfd_send_signal(r2, 0x4, &(0x7f0000000600)={0x0, 0x3ff, 0x8}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x100, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x36}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa6, 0xbe, "2a15007a434fcdaefe1f9d0dc60a71f7c4f38b736551a6a147f2f515bab498795190b5c5b4cd5bd276a9e5175e716271cc845e4a1d8ad7a42b4b659c3e4f855fbe33e54df31391461021a5b544d21b56261be5a370822d3c0c831781e379ca93fc71b8e28ae90b9acee09f21ee5de39272b28a81818bc1940415c578ddbb2bb755bb9713bc99dc8559c205a05b70c3e2925c41ed87931892f5f5b8c0a4eca7fe50f5"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xf000}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x61}, 0x8000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000008c0)={{0x2, 0x3, 0x7, 0x2, 0x7fffffff}, 0x7f, 0x7ff, 'id1\x00', 'timer1\x00', 0x0, 0x80000000000000, 0xd4, 0x1f, 0x5}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000009c0)={0x1f, @none}, 0x8) epoll_create1(0x0) accept(r4, &(0x7f0000000a00)=@ieee802154={0x24, @long}, &(0x7f0000000a80)=0x80) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000ac0)=""/20, &(0x7f0000000b00)=0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x9, 0x0, 0x80, 0x3, 0x371fda50eed2a68}, 0x7f) 04:57:11 executing program 2: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x40000, 0x8) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x8040}, 0x40041) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x187) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/crypto\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000200)=0x2, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20bc0, 0x8) renameat2(r3, &(0x7f0000000280)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x1) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000c00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000380)={0x82c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x1d4, 0x8, 0x0, 0x1, [{0x128, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xc6b4973790e8deca}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5af5, @local, 0x7fff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "335e29a038aa322a30bec7a4b5498d7853544b9b44093bed8a69349381de097f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8001}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ada54ec4a6d73e78168a00333f47d3bd45525a5fa31890f49c24a311b1e62003"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x618, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3f}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70a39f08ef8bfdf1fb370321a44295f788d85d1949194d30ef3fa9a65c50d7ff"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1000, @mcast1, 0x8}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x4b0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xffff9333, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}}, @WGPEER_A_ALLOWEDIPS={0x420, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7ff, @rand_addr=' \x01\x00'}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cc8c1e01146f789598af98d42cb7b81ca6361b7baab0f8ecfa532fe6b667124f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2e4bce00d3802b662d1c3109756914ea5bf6db00b207a015a5230a1a55af905"}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x80000001, @local, 0x7}}]}]}]}, 0x82c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) getpeername$netlink(r0, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000cc0)=0x18, 0x4) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000d00)=0x41e3) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000d40)={'veth1_vlan\x00'}) faccessat(r3, &(0x7f0000000d80)='./file0\x00', 0x4) bind$netlink(r2, &(0x7f0000000dc0)={0x10, 0x0, 0x25dfdbfc, 0xb00}, 0xc) mknodat$loop(r1, &(0x7f0000000e00)='./file0/../file0\x00', 0xc000, 0x0) 04:57:11 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000500)={'geneve0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) statx(r4, &(0x7f0000000580)='./file1\x00', 0x100, 0x400, &(0x7f00000005c0)) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000006c0)=0x6) r5 = openat$incfs(r4, &(0x7f0000000700)='.log\x00', 0x402, 0x113) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:57:11 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4c890) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000240)={'vxcan1\x00'}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x111100, 0x13) faccessat(r2, &(0x7f00000002c0)='./file0\x00', 0x2d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40002) faccessat(r2, &(0x7f0000000440)='./file0\x00', 0x181) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r1) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x20}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x14008000) fchmodat(r1, &(0x7f00000005c0)='./file0\x00', 0x18) fchmodat(r2, &(0x7f0000000600)='./file0\x00', 0x165) syz_genetlink_get_family_id$fou(&(0x7f0000000640), r4) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x5, 0x79}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x40000010) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0x9e, 0xf8, 0x2, 0x47, @mcast2, @empty, 0x20, 0x1, 0x9, 0x8}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000a00)={0x0, @hci={0x1f, 0x2, 0x4}, @hci={0x1f, 0x3, 0x4}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80}, 0x2c46, 0x0, 0x0, 0x0, 0x7, &(0x7f00000009c0)='netpci0\x00', 0x2, 0x1, 0x3ff}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}}, 0x4000000) 04:57:11 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x27, 0x8000e, 0x4ae) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x297}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x378}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x104}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xa5, 0x105001) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008040) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c081}, 0x4000) r5 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000580)=0x80) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f00000005c0)=0x53, 0x4) r7 = accept(r6, &(0x7f0000000600)=@x25, &(0x7f0000000680)=0x80) getsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r4) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48044) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x801) r9 = syz_open_dev$vcsn(&(0x7f0000000980), 0x4, 0x4c0c2) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0x0, 0x2, 0x70bd2b, 0x8, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x26}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x884) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000c40)=0x7fffffff, 0x4) [ 57.098003] audit: type=1400 audit(1664686631.139:6): avc: denied { execmem } for pid=287 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 04:57:11 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x101) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000c1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x208, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8801) r2 = pidfd_getfd(r0, r0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000003c0)=0x80000001) syz_io_uring_setup(0x28f1, &(0x7f0000000400)={0x0, 0x195, 0x0, 0x0, 0x3a8, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000003600)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2007, @fd, 0x4, &(0x7f0000003580)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/64, 0x40}, {&(0x7f0000003540)=""/48, 0x30}], 0x5, 0x4}, 0x3ff) r4 = syz_open_dev$vcsn(&(0x7f0000003640), 0x6c00000000000, 0x10000) statx(r2, &(0x7f0000003680)='./file0\x00', 0x0, 0x10, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f00000037c0)={@id={0x2, 0x0, @auto="179e6088b3737cce7af841f709fd029c"}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r6, &(0x7f0000003840)=@nl=@proc, &(0x7f00000038c0)=0x80) 04:57:11 executing program 6: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x6000, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@uname={'uname', 0x3d, '..{$,'}}, {@posixacl}, {@access_any}, {@afid={'afid', 0x3d, 0x9}}, {@cachetag={'cachetag', 0x3d, '-*#$'}}, {@access_uid={'access', 0x3d, r0}}, {@aname}, {@loose}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, '&'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@fowner_lt={'fowner<', r1}}, {@subj_user}]}}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x2, 0x400400) fchownat(r2, &(0x7f0000000500)='./file0\x00', r1, 0xee01, 0x1000) faccessat(r2, &(0x7f0000000540)='./file0\x00', 0x43) symlinkat(&(0x7f0000000580)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00') futimesat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={{0x0, 0x2710}, {0x0, 0x2710}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x840, 0x0) faccessat2(r3, &(0x7f00000006c0)='./file0\x00', 0x80, 0x100) mknodat(r3, &(0x7f0000000700)='./file0/file0\x00', 0x8000, 0x8000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000740)={{0x3, 0x3, 0x40, 0x3, 0x200}, 0x7fff, 0x6, 0x9}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/timer_list\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000800)='./file0/file0\x00', r3, &(0x7f0000000840)='./file0/file0\x00') execveat(r3, &(0x7f0000000880)='./file0\x00', &(0x7f00000009c0)=[&(0x7f00000008c0)='@\'{\'\x00', &(0x7f0000000900)='9p\x00', &(0x7f0000000940)='*', &(0x7f0000000980)='\x00'], &(0x7f0000000c00)=[&(0x7f0000000a00)='trans=fd,', &(0x7f0000000a40)='fowner<', &(0x7f0000000a80)='\\%\x00', &(0x7f0000000ac0)='/dev/vcs#\x00', &(0x7f0000000b00)='$.\x00', &(0x7f0000000b40)='appraise_type=imasig', &(0x7f0000000b80)='/\xf2\\\x00', &(0x7f0000000bc0)=',!\x00'], 0x400) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x3, 0x200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r6 = syz_open_dev$vcsn(&(0x7f0000000dc0), 0x51, 0x40800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000e00)={0xffffffffffffffff, 0x1, 0x6, 0x1, 0x5}) [ 58.484906] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.486751] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.494845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.496697] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.498472] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.500307] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 58.501281] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 58.502290] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.502865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.504582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.506205] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.508064] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 58.509407] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.510788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.512991] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 58.514321] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.514942] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.516207] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.517757] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.519361] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.520689] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 58.521781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.523241] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 58.528102] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 58.530016] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.530160] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.531592] Bluetooth: hci1: HCI_REQ-0x0c1a [ 58.533235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.534494] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 58.536685] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 58.537681] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 58.539021] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.540131] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 58.541253] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 58.542472] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.544702] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.546844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 58.548793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.550436] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.551843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.553063] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.553684] Bluetooth: hci6: HCI_REQ-0x0c1a [ 58.554314] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 58.554870] Bluetooth: hci2: HCI_REQ-0x0c1a [ 58.557069] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 58.558357] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.561168] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 58.562829] Bluetooth: hci0: HCI_REQ-0x0c1a [ 58.563132] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.565175] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.566563] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 58.573858] Bluetooth: hci4: HCI_REQ-0x0c1a [ 58.574812] Bluetooth: hci5: HCI_REQ-0x0c1a [ 58.575735] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 58.576874] Bluetooth: hci3: HCI_REQ-0x0c1a [ 58.583578] Bluetooth: hci7: HCI_REQ-0x0c1a [ 60.595160] Bluetooth: hci3: command 0x0409 tx timeout [ 60.596373] Bluetooth: hci7: command 0x0409 tx timeout [ 60.597862] Bluetooth: hci0: command 0x0409 tx timeout [ 60.598820] Bluetooth: hci5: command 0x0409 tx timeout [ 60.599751] Bluetooth: hci1: command 0x0409 tx timeout [ 60.658811] Bluetooth: hci2: command 0x0409 tx timeout [ 60.660032] Bluetooth: hci6: command 0x0409 tx timeout [ 60.661156] Bluetooth: hci4: command 0x0409 tx timeout [ 62.642780] Bluetooth: hci1: command 0x041b tx timeout [ 62.643353] Bluetooth: hci5: command 0x041b tx timeout [ 62.643888] Bluetooth: hci0: command 0x041b tx timeout [ 62.644338] Bluetooth: hci7: command 0x041b tx timeout [ 62.644818] Bluetooth: hci3: command 0x041b tx timeout [ 62.706616] Bluetooth: hci4: command 0x041b tx timeout [ 62.707141] Bluetooth: hci6: command 0x041b tx timeout [ 62.707658] Bluetooth: hci2: command 0x041b tx timeout [ 64.690721] Bluetooth: hci3: command 0x040f tx timeout [ 64.691488] Bluetooth: hci7: command 0x040f tx timeout [ 64.692600] Bluetooth: hci0: command 0x040f tx timeout [ 64.693337] Bluetooth: hci5: command 0x040f tx timeout [ 64.694139] Bluetooth: hci1: command 0x040f tx timeout [ 64.754678] Bluetooth: hci2: command 0x040f tx timeout [ 64.756204] Bluetooth: hci6: command 0x040f tx timeout [ 64.756939] Bluetooth: hci4: command 0x040f tx timeout [ 66.738648] Bluetooth: hci1: command 0x0419 tx timeout [ 66.739242] Bluetooth: hci5: command 0x0419 tx timeout [ 66.739810] Bluetooth: hci0: command 0x0419 tx timeout [ 66.740310] Bluetooth: hci7: command 0x0419 tx timeout [ 66.740871] Bluetooth: hci3: command 0x0419 tx timeout [ 66.802598] Bluetooth: hci4: command 0x0419 tx timeout [ 66.803220] Bluetooth: hci6: command 0x0419 tx timeout [ 66.803773] Bluetooth: hci2: command 0x0419 tx timeout 04:58:05 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000500)={'geneve0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) statx(r4, &(0x7f0000000580)='./file1\x00', 0x100, 0x400, &(0x7f00000005c0)) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000006c0)=0x6) r5 = openat$incfs(r4, &(0x7f0000000700)='.log\x00', 0x402, 0x113) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:58:05 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000500)={'geneve0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) statx(r4, &(0x7f0000000580)='./file1\x00', 0x100, 0x400, &(0x7f00000005c0)) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000006c0)=0x6) r5 = openat$incfs(r4, &(0x7f0000000700)='.log\x00', 0x402, 0x113) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:58:05 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000500)={'geneve0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) statx(r4, &(0x7f0000000580)='./file1\x00', 0x100, 0x400, &(0x7f00000005c0)) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000006c0)=0x6) r5 = openat$incfs(r4, &(0x7f0000000700)='.log\x00', 0x402, 0x113) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:58:05 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000500)={'geneve0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) statx(r4, &(0x7f0000000580)='./file1\x00', 0x100, 0x400, &(0x7f00000005c0)) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000006c0)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:58:06 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000500)={'geneve0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) statx(r4, &(0x7f0000000580)='./file1\x00', 0x100, 0x400, &(0x7f00000005c0)) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000006c0)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:58:06 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000500)={'geneve0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) statx(r4, &(0x7f0000000580)='./file1\x00', 0x100, 0x400, &(0x7f00000005c0)) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000006c0)=0x6) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:58:06 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000500)={'geneve0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) statx(r4, &(0x7f0000000580)='./file1\x00', 0x100, 0x400, &(0x7f00000005c0)) r5 = openat$incfs(r4, &(0x7f0000000700)='.log\x00', 0x402, 0x113) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:58:06 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000500)={'geneve0\x00'}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = openat$incfs(r4, &(0x7f0000000700)='.log\x00', 0x402, 0x113) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) [ 117.490778] syz-executor.1 (299) used greatest stack depth: 23784 bytes left [ 119.888506] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 119.890793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 119.892215] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 119.894819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 119.896495] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 119.897770] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 119.903252] Bluetooth: hci4: HCI_REQ-0x0c1a [ 121.843648] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 121.845129] Bluetooth: hci1: Opcode 0x c03 failed: -110 [ 121.906642] Bluetooth: hci5: Opcode 0x c03 failed: -110 [ 121.971313] Bluetooth: hci4: command 0x0409 tx timeout [ 124.018636] Bluetooth: hci4: command 0x041b tx timeout [ 124.175190] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.177648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.180259] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.184086] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.185976] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.187625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.192181] Bluetooth: hci1: HCI_REQ-0x0c1a [ 124.242297] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 124.252795] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 124.255771] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 124.270948] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 124.280288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 124.284782] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 124.294626] Bluetooth: hci5: HCI_REQ-0x0c1a [ 126.066599] Bluetooth: hci4: command 0x040f tx timeout [ 126.258659] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 126.260071] Bluetooth: hci1: command 0x0409 tx timeout [ 126.322679] Bluetooth: hci5: command 0x0409 tx timeout [ 128.114568] Bluetooth: hci4: command 0x0419 tx timeout [ 128.306591] Bluetooth: hci1: command 0x041b tx timeout [ 128.370570] Bluetooth: hci5: command 0x041b tx timeout [ 128.456247] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 128.457242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 128.459010] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 128.460814] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 128.462049] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 128.462729] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 128.465108] Bluetooth: hci3: HCI_REQ-0x0c1a [ 130.354575] Bluetooth: hci1: command 0x040f tx timeout [ 130.418572] Bluetooth: hci5: command 0x040f tx timeout [ 130.482598] Bluetooth: hci3: command 0x0409 tx timeout [ 132.402585] Bluetooth: hci1: command 0x0419 tx timeout [ 132.466660] Bluetooth: hci5: command 0x0419 tx timeout [ 132.530739] Bluetooth: hci3: command 0x041b tx timeout [ 134.578728] Bluetooth: hci3: command 0x040f tx timeout [ 136.626582] Bluetooth: hci3: command 0x0419 tx timeout [ 154.226673] Bluetooth: hci3: command 0x0405 tx timeout 04:58:57 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x10000, 0x140) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) process_madvise(r1, &(0x7f00000004c0)=[{&(0x7f0000000080)="5c389caf4c0eaece262071eb10f415245d476a898f0b24a36dc573461b749da861d96e64457eac33729e23dc66", 0x2d}, {&(0x7f00000000c0)="7855b3600ef9050e560b14185a79fea1b10222591db422849654069d009c00b0244ad9aacfaba6755b94da7fb0d80c8e57463a86d04b9f7dc740a3ee7594da6d59135771d2a7efcd67ab3b0f5d9113e0a64072fdabd0f4269d8716035b53a3cd29dd4462cda873b85fe32f21354c11af50a1ad72bb5b80bd5c99726ff7f3dc2bdb5e2f3c04b57577ce8c", 0x8a}, {&(0x7f0000000180)="e742287a30e52981e6e0ae55f532815c60547058df37f3e2e41416c2a9a3de17ab3532af208759c4884c96b97d7b80817ac9fa5597515edd489e647a8a61e228904fcbcac2c4d3a74446c388040acf377f5c0ca33931a868a6cb1312a5706dd7fd33040a546e73a914aa38e4d4f433d7b3c72a2bd187397936b19708f46300fa53609356f3185503fd0a6d85318076bb9df1192612cb79d974964085c6660be2bf9e2452c4392ac50e6fbcdbb7aae23e6d5cc9db54d87609cf20863bf74a3b306d49bc0c9d6e3fdd38267294ca145bf2a933f65757e11aee9c448de175557e8f9490", 0xe2}, {&(0x7f0000000280)="e7996a0abf37ec27f9299af8c4add3cdaab1641ee5a06d46b961b90b683c9c964125b130144f8aa2ae7fc8e358048ef85a5b0125282fee8491ff0970253793ec0a223d67", 0x44}, {&(0x7f0000000300)="e2f4dd9e61732653b3a7406a97f1b0429d7481a26245b466aadff2d4da131e0ba7da1b2a0c6f061b174678837bb86ec32df41e60a3ba679b1d7c098949b1e12c2974f6b94f8baa55a34d26a46771abf5b8833ed0c16cb8f5c0c47d73ebcedf208faa7d794d890848cc2448d7c1eb5b08624ab548adca4e51c2c117878743bd60f7b27600f8e3fb", 0x87}, {&(0x7f00000003c0)="c835e9b2dc814ffdc657dc15bea249b91df4b60293245fd4b1364bf7c112c0fd7d39e2477c7ea8e26fd5f04ae5f97ab1ffce1120dae1e713551b8f45b41866efb74511801accc7a6a901a7861c", 0x4d}, {&(0x7f0000000440)="7bfc039bace010342ff59378c150f30714cda0fd7bfbc6b20b10dcc3ff4401f6062bf54cc6b70488ec52ac3d4f14d74ed7cab11f73d5b704292aaf10c4c80025629ceb544e4ab40c6c757e8e211396e6e3a84951", 0x54}], 0x7, 0x3, 0x0) getdents64(r0, &(0x7f0000000540)=""/94, 0x5e) r2 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x6, 0x200) pidfd_send_signal(r2, 0x4, &(0x7f0000000600)={0x0, 0x3ff, 0x8}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x100, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x36}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa6, 0xbe, "2a15007a434fcdaefe1f9d0dc60a71f7c4f38b736551a6a147f2f515bab498795190b5c5b4cd5bd276a9e5175e716271cc845e4a1d8ad7a42b4b659c3e4f855fbe33e54df31391461021a5b544d21b56261be5a370822d3c0c831781e379ca93fc71b8e28ae90b9acee09f21ee5de39272b28a81818bc1940415c578ddbb2bb755bb9713bc99dc8559c205a05b70c3e2925c41ed87931892f5f5b8c0a4eca7fe50f5"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xf000}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x61}, 0x8000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000008c0)={{0x2, 0x3, 0x7, 0x2, 0x7fffffff}, 0x7f, 0x7ff, 'id1\x00', 'timer1\x00', 0x0, 0x80000000000000, 0xd4, 0x1f, 0x5}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000009c0)={0x1f, @none}, 0x8) epoll_create1(0x0) accept(r4, &(0x7f0000000a00)=@ieee802154={0x24, @long}, &(0x7f0000000a80)=0x80) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000ac0)=""/20, &(0x7f0000000b00)=0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x9, 0x0, 0x80, 0x3, 0x371fda50eed2a68}, 0x7f) 04:58:58 executing program 0: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x3) setns(r1, 0x2000000) setns(r0, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) setns(r0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x20000000) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xee00) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000001c0)={'ip6gretap0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x800) r4 = io_uring_setup(0x4cf3, &(0x7f0000000300)={0x0, 0x7042, 0x4, 0x3, 0x2e4}) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x8) statx(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x6000, 0x10, &(0x7f0000000440)) 04:58:58 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x27, 0x8000e, 0x4ae) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x297}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x378}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x104}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xa5, 0x105001) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008040) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c081}, 0x4000) r5 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000580)=0x80) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f00000005c0)=0x53, 0x4) r7 = accept(r6, &(0x7f0000000600)=@x25, &(0x7f0000000680)=0x80) getsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r4) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48044) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x801) r9 = syz_open_dev$vcsn(&(0x7f0000000980), 0x4, 0x4c0c2) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0x0, 0x2, 0x70bd2b, 0x8, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x26}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x884) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000c40)=0x7fffffff, 0x4) 04:58:58 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000500)={'geneve0\x00'}) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000700)='.log\x00', 0x402, 0x113) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:58:58 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4c890) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000240)={'vxcan1\x00'}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x111100, 0x13) faccessat(r2, &(0x7f00000002c0)='./file0\x00', 0x2d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40002) faccessat(r2, &(0x7f0000000440)='./file0\x00', 0x181) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r1) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x20}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x14008000) fchmodat(r1, &(0x7f00000005c0)='./file0\x00', 0x18) fchmodat(r2, &(0x7f0000000600)='./file0\x00', 0x165) syz_genetlink_get_family_id$fou(&(0x7f0000000640), r4) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x5, 0x79}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x40000010) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0x9e, 0xf8, 0x2, 0x47, @mcast2, @empty, 0x20, 0x1, 0x9, 0x8}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000a00)={0x0, @hci={0x1f, 0x2, 0x4}, @hci={0x1f, 0x3, 0x4}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80}, 0x2c46, 0x0, 0x0, 0x0, 0x7, &(0x7f00000009c0)='netpci0\x00', 0x2, 0x1, 0x3ff}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}}, 0x4000000) 04:58:58 executing program 6: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x6000, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@uname={'uname', 0x3d, '..{$,'}}, {@posixacl}, {@access_any}, {@afid={'afid', 0x3d, 0x9}}, {@cachetag={'cachetag', 0x3d, '-*#$'}}, {@access_uid={'access', 0x3d, r0}}, {@aname}, {@loose}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, '&'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@fowner_lt={'fowner<', r1}}, {@subj_user}]}}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x2, 0x400400) fchownat(r2, &(0x7f0000000500)='./file0\x00', r1, 0xee01, 0x1000) faccessat(r2, &(0x7f0000000540)='./file0\x00', 0x43) symlinkat(&(0x7f0000000580)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00') futimesat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={{0x0, 0x2710}, {0x0, 0x2710}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x840, 0x0) faccessat2(r3, &(0x7f00000006c0)='./file0\x00', 0x80, 0x100) mknodat(r3, &(0x7f0000000700)='./file0/file0\x00', 0x8000, 0x8000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000740)={{0x3, 0x3, 0x40, 0x3, 0x200}, 0x7fff, 0x6, 0x9}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/timer_list\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000800)='./file0/file0\x00', r3, &(0x7f0000000840)='./file0/file0\x00') execveat(r3, &(0x7f0000000880)='./file0\x00', &(0x7f00000009c0)=[&(0x7f00000008c0)='@\'{\'\x00', &(0x7f0000000900)='9p\x00', &(0x7f0000000940)='*', &(0x7f0000000980)='\x00'], &(0x7f0000000c00)=[&(0x7f0000000a00)='trans=fd,', &(0x7f0000000a40)='fowner<', &(0x7f0000000a80)='\\%\x00', &(0x7f0000000ac0)='/dev/vcs#\x00', &(0x7f0000000b00)='$.\x00', &(0x7f0000000b40)='appraise_type=imasig', &(0x7f0000000b80)='/\xf2\\\x00', &(0x7f0000000bc0)=',!\x00'], 0x400) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x3, 0x200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r6 = syz_open_dev$vcsn(&(0x7f0000000dc0), 0x51, 0x40800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000e00)={0xffffffffffffffff, 0x1, 0x6, 0x1, 0x5}) 04:58:58 executing program 2: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x40000, 0x8) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x8040}, 0x40041) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x187) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/crypto\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000200)=0x2, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20bc0, 0x8) renameat2(r3, &(0x7f0000000280)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x1) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000c00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000380)={0x82c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x1d4, 0x8, 0x0, 0x1, [{0x128, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xc6b4973790e8deca}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5af5, @local, 0x7fff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "335e29a038aa322a30bec7a4b5498d7853544b9b44093bed8a69349381de097f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8001}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ada54ec4a6d73e78168a00333f47d3bd45525a5fa31890f49c24a311b1e62003"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x618, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3f}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70a39f08ef8bfdf1fb370321a44295f788d85d1949194d30ef3fa9a65c50d7ff"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1000, @mcast1, 0x8}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x4b0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xffff9333, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}}, @WGPEER_A_ALLOWEDIPS={0x420, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7ff, @rand_addr=' \x01\x00'}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cc8c1e01146f789598af98d42cb7b81ca6361b7baab0f8ecfa532fe6b667124f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2e4bce00d3802b662d1c3109756914ea5bf6db00b207a015a5230a1a55af905"}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x80000001, @local, 0x7}}]}]}]}, 0x82c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) getpeername$netlink(r0, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000cc0)=0x18, 0x4) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000d00)=0x41e3) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000d40)={'veth1_vlan\x00'}) faccessat(r3, &(0x7f0000000d80)='./file0\x00', 0x4) bind$netlink(r2, &(0x7f0000000dc0)={0x10, 0x0, 0x25dfdbfc, 0xb00}, 0xc) mknodat$loop(r1, &(0x7f0000000e00)='./file0/../file0\x00', 0xc000, 0x0) 04:58:58 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x101) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000c1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x208, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8801) r2 = pidfd_getfd(r0, r0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000003c0)=0x80000001) syz_io_uring_setup(0x28f1, &(0x7f0000000400)={0x0, 0x195, 0x0, 0x0, 0x3a8, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000003600)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2007, @fd, 0x4, &(0x7f0000003580)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/64, 0x40}, {&(0x7f0000003540)=""/48, 0x30}], 0x5, 0x4}, 0x3ff) r4 = syz_open_dev$vcsn(&(0x7f0000003640), 0x6c00000000000, 0x10000) statx(r2, &(0x7f0000003680)='./file0\x00', 0x0, 0x10, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f00000037c0)={@id={0x2, 0x0, @auto="179e6088b3737cce7af841f709fd029c"}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r6, &(0x7f0000003840)=@nl=@proc, &(0x7f00000038c0)=0x80) 04:58:58 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x101) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000c1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x208, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8801) r2 = pidfd_getfd(r0, r0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000003c0)=0x80000001) syz_io_uring_setup(0x28f1, &(0x7f0000000400)={0x0, 0x195, 0x0, 0x0, 0x3a8, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000003600)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2007, @fd, 0x4, &(0x7f0000003580)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/64, 0x40}, {&(0x7f0000003540)=""/48, 0x30}], 0x5, 0x4}, 0x3ff) r4 = syz_open_dev$vcsn(&(0x7f0000003640), 0x6c00000000000, 0x10000) statx(r2, &(0x7f0000003680)='./file0\x00', 0x0, 0x10, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f00000037c0)={@id={0x2, 0x0, @auto="179e6088b3737cce7af841f709fd029c"}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r6, &(0x7f0000003840)=@nl=@proc, &(0x7f00000038c0)=0x80) 04:58:58 executing program 6: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x6000, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@uname={'uname', 0x3d, '..{$,'}}, {@posixacl}, {@access_any}, {@afid={'afid', 0x3d, 0x9}}, {@cachetag={'cachetag', 0x3d, '-*#$'}}, {@access_uid={'access', 0x3d, r0}}, {@aname}, {@loose}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, '&'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@fowner_lt={'fowner<', r1}}, {@subj_user}]}}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x2, 0x400400) fchownat(r2, &(0x7f0000000500)='./file0\x00', r1, 0xee01, 0x1000) faccessat(r2, &(0x7f0000000540)='./file0\x00', 0x43) symlinkat(&(0x7f0000000580)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00') futimesat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={{0x0, 0x2710}, {0x0, 0x2710}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x840, 0x0) faccessat2(r3, &(0x7f00000006c0)='./file0\x00', 0x80, 0x100) mknodat(r3, &(0x7f0000000700)='./file0/file0\x00', 0x8000, 0x8000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000740)={{0x3, 0x3, 0x40, 0x3, 0x200}, 0x7fff, 0x6, 0x9}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/timer_list\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000800)='./file0/file0\x00', r3, &(0x7f0000000840)='./file0/file0\x00') execveat(r3, &(0x7f0000000880)='./file0\x00', &(0x7f00000009c0)=[&(0x7f00000008c0)='@\'{\'\x00', &(0x7f0000000900)='9p\x00', &(0x7f0000000940)='*', &(0x7f0000000980)='\x00'], &(0x7f0000000c00)=[&(0x7f0000000a00)='trans=fd,', &(0x7f0000000a40)='fowner<', &(0x7f0000000a80)='\\%\x00', &(0x7f0000000ac0)='/dev/vcs#\x00', &(0x7f0000000b00)='$.\x00', &(0x7f0000000b40)='appraise_type=imasig', &(0x7f0000000b80)='/\xf2\\\x00', &(0x7f0000000bc0)=',!\x00'], 0x400) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x3, 0x200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r6 = syz_open_dev$vcsn(&(0x7f0000000dc0), 0x51, 0x40800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000e00)={0xffffffffffffffff, 0x1, 0x6, 0x1, 0x5}) 04:58:58 executing program 0: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x3) setns(r1, 0x2000000) setns(r0, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) setns(r0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x20000000) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xee00) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000001c0)={'ip6gretap0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x800) r4 = io_uring_setup(0x4cf3, &(0x7f0000000300)={0x0, 0x7042, 0x4, 0x3, 0x2e4}) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x8) statx(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x6000, 0x10, &(0x7f0000000440)) 04:58:58 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x101) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000c1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x208, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8801) r2 = pidfd_getfd(r0, r0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000003c0)=0x80000001) syz_io_uring_setup(0x28f1, &(0x7f0000000400)={0x0, 0x195, 0x0, 0x0, 0x3a8, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000003600)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2007, @fd, 0x4, &(0x7f0000003580)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/64, 0x40}, {&(0x7f0000003540)=""/48, 0x30}], 0x5, 0x4}, 0x3ff) r4 = syz_open_dev$vcsn(&(0x7f0000003640), 0x6c00000000000, 0x10000) statx(r2, &(0x7f0000003680)='./file0\x00', 0x0, 0x10, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f00000037c0)={@id={0x2, 0x0, @auto="179e6088b3737cce7af841f709fd029c"}}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r6, &(0x7f0000003840)=@nl=@proc, &(0x7f00000038c0)=0x80) 04:58:58 executing program 0: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x3) setns(r1, 0x2000000) setns(r0, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) setns(r0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x20000000) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xee00) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000001c0)={'ip6gretap0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x800) r4 = io_uring_setup(0x4cf3, &(0x7f0000000300)={0x0, 0x7042, 0x4, 0x3, 0x2e4}) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x8) statx(0xffffffffffffffff, &(0x7f0000000400)='./file0\x00', 0x6000, 0x10, &(0x7f0000000440)) 04:58:58 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x27, 0x8000e, 0x4ae) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x297}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x378}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x104}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xa5, 0x105001) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008040) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c081}, 0x4000) r5 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000580)=0x80) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f00000005c0)=0x53, 0x4) r7 = accept(r6, &(0x7f0000000600)=@x25, &(0x7f0000000680)=0x80) getsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r4) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48044) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x801) r9 = syz_open_dev$vcsn(&(0x7f0000000980), 0x4, 0x4c0c2) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0x0, 0x2, 0x70bd2b, 0x8, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x26}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x884) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000c40)=0x7fffffff, 0x4) 04:58:58 executing program 6: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x6000, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@uname={'uname', 0x3d, '..{$,'}}, {@posixacl}, {@access_any}, {@afid={'afid', 0x3d, 0x9}}, {@cachetag={'cachetag', 0x3d, '-*#$'}}, {@access_uid={'access', 0x3d, r0}}, {@aname}, {@loose}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, '&'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@fowner_lt={'fowner<', r1}}, {@subj_user}]}}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x2, 0x400400) fchownat(r2, &(0x7f0000000500)='./file0\x00', r1, 0xee01, 0x1000) faccessat(r2, &(0x7f0000000540)='./file0\x00', 0x43) symlinkat(&(0x7f0000000580)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00') futimesat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={{0x0, 0x2710}, {0x0, 0x2710}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x840, 0x0) faccessat2(r3, &(0x7f00000006c0)='./file0\x00', 0x80, 0x100) mknodat(r3, &(0x7f0000000700)='./file0/file0\x00', 0x8000, 0x8000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000740)={{0x3, 0x3, 0x40, 0x3, 0x200}, 0x7fff, 0x6, 0x9}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/timer_list\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000800)='./file0/file0\x00', r3, &(0x7f0000000840)='./file0/file0\x00') execveat(r3, &(0x7f0000000880)='./file0\x00', &(0x7f00000009c0)=[&(0x7f00000008c0)='@\'{\'\x00', &(0x7f0000000900)='9p\x00', &(0x7f0000000940)='*', &(0x7f0000000980)='\x00'], &(0x7f0000000c00)=[&(0x7f0000000a00)='trans=fd,', &(0x7f0000000a40)='fowner<', &(0x7f0000000a80)='\\%\x00', &(0x7f0000000ac0)='/dev/vcs#\x00', &(0x7f0000000b00)='$.\x00', &(0x7f0000000b40)='appraise_type=imasig', &(0x7f0000000b80)='/\xf2\\\x00', &(0x7f0000000bc0)=',!\x00'], 0x400) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x3, 0x200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r6 = syz_open_dev$vcsn(&(0x7f0000000dc0), 0x51, 0x40800) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000e00)={0xffffffffffffffff, 0x1, 0x6, 0x1, 0x5}) 04:58:58 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000500)={'geneve0\x00'}) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000700)='.log\x00', 0x402, 0x113) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:59:13 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x10000, 0x140) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) process_madvise(r1, &(0x7f00000004c0)=[{&(0x7f0000000080)="5c389caf4c0eaece262071eb10f415245d476a898f0b24a36dc573461b749da861d96e64457eac33729e23dc66", 0x2d}, {&(0x7f00000000c0)="7855b3600ef9050e560b14185a79fea1b10222591db422849654069d009c00b0244ad9aacfaba6755b94da7fb0d80c8e57463a86d04b9f7dc740a3ee7594da6d59135771d2a7efcd67ab3b0f5d9113e0a64072fdabd0f4269d8716035b53a3cd29dd4462cda873b85fe32f21354c11af50a1ad72bb5b80bd5c99726ff7f3dc2bdb5e2f3c04b57577ce8c", 0x8a}, {&(0x7f0000000180)="e742287a30e52981e6e0ae55f532815c60547058df37f3e2e41416c2a9a3de17ab3532af208759c4884c96b97d7b80817ac9fa5597515edd489e647a8a61e228904fcbcac2c4d3a74446c388040acf377f5c0ca33931a868a6cb1312a5706dd7fd33040a546e73a914aa38e4d4f433d7b3c72a2bd187397936b19708f46300fa53609356f3185503fd0a6d85318076bb9df1192612cb79d974964085c6660be2bf9e2452c4392ac50e6fbcdbb7aae23e6d5cc9db54d87609cf20863bf74a3b306d49bc0c9d6e3fdd38267294ca145bf2a933f65757e11aee9c448de175557e8f9490", 0xe2}, {&(0x7f0000000280)="e7996a0abf37ec27f9299af8c4add3cdaab1641ee5a06d46b961b90b683c9c964125b130144f8aa2ae7fc8e358048ef85a5b0125282fee8491ff0970253793ec0a223d67", 0x44}, {&(0x7f0000000300)="e2f4dd9e61732653b3a7406a97f1b0429d7481a26245b466aadff2d4da131e0ba7da1b2a0c6f061b174678837bb86ec32df41e60a3ba679b1d7c098949b1e12c2974f6b94f8baa55a34d26a46771abf5b8833ed0c16cb8f5c0c47d73ebcedf208faa7d794d890848cc2448d7c1eb5b08624ab548adca4e51c2c117878743bd60f7b27600f8e3fb", 0x87}, {&(0x7f00000003c0)="c835e9b2dc814ffdc657dc15bea249b91df4b60293245fd4b1364bf7c112c0fd7d39e2477c7ea8e26fd5f04ae5f97ab1ffce1120dae1e713551b8f45b41866efb74511801accc7a6a901a7861c", 0x4d}, {&(0x7f0000000440)="7bfc039bace010342ff59378c150f30714cda0fd7bfbc6b20b10dcc3ff4401f6062bf54cc6b70488ec52ac3d4f14d74ed7cab11f73d5b704292aaf10c4c80025629ceb544e4ab40c6c757e8e211396e6e3a84951", 0x54}], 0x7, 0x3, 0x0) getdents64(r0, &(0x7f0000000540)=""/94, 0x5e) r2 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x6, 0x200) pidfd_send_signal(r2, 0x4, &(0x7f0000000600)={0x0, 0x3ff, 0x8}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x100, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x36}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa6, 0xbe, "2a15007a434fcdaefe1f9d0dc60a71f7c4f38b736551a6a147f2f515bab498795190b5c5b4cd5bd276a9e5175e716271cc845e4a1d8ad7a42b4b659c3e4f855fbe33e54df31391461021a5b544d21b56261be5a370822d3c0c831781e379ca93fc71b8e28ae90b9acee09f21ee5de39272b28a81818bc1940415c578ddbb2bb755bb9713bc99dc8559c205a05b70c3e2925c41ed87931892f5f5b8c0a4eca7fe50f5"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xf000}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x61}, 0x8000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000008c0)={{0x2, 0x3, 0x7, 0x2, 0x7fffffff}, 0x7f, 0x7ff, 'id1\x00', 'timer1\x00', 0x0, 0x80000000000000, 0xd4, 0x1f, 0x5}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000009c0)={0x1f, @none}, 0x8) epoll_create1(0x0) accept(r4, &(0x7f0000000a00)=@ieee802154={0x24, @long}, &(0x7f0000000a80)=0x80) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000ac0)=""/20, &(0x7f0000000b00)=0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x9, 0x0, 0x80, 0x3, 0x371fda50eed2a68}, 0x7f) 04:59:13 executing program 2: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x40000, 0x8) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x8040}, 0x40041) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x187) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/crypto\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000200)=0x2, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20bc0, 0x8) renameat2(r3, &(0x7f0000000280)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x1) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000c00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000380)={0x82c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x1d4, 0x8, 0x0, 0x1, [{0x128, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xc6b4973790e8deca}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5af5, @local, 0x7fff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "335e29a038aa322a30bec7a4b5498d7853544b9b44093bed8a69349381de097f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8001}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ada54ec4a6d73e78168a00333f47d3bd45525a5fa31890f49c24a311b1e62003"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x618, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3f}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70a39f08ef8bfdf1fb370321a44295f788d85d1949194d30ef3fa9a65c50d7ff"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1000, @mcast1, 0x8}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x4b0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xffff9333, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}}, @WGPEER_A_ALLOWEDIPS={0x420, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7ff, @rand_addr=' \x01\x00'}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cc8c1e01146f789598af98d42cb7b81ca6361b7baab0f8ecfa532fe6b667124f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2e4bce00d3802b662d1c3109756914ea5bf6db00b207a015a5230a1a55af905"}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x80000001, @local, 0x7}}]}]}]}, 0x82c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) getpeername$netlink(r0, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000cc0)=0x18, 0x4) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000d00)=0x41e3) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000d40)={'veth1_vlan\x00'}) faccessat(r3, &(0x7f0000000d80)='./file0\x00', 0x4) bind$netlink(r2, &(0x7f0000000dc0)={0x10, 0x0, 0x25dfdbfc, 0xb00}, 0xc) mknodat$loop(r1, &(0x7f0000000e00)='./file0/../file0\x00', 0xc000, 0x0) 04:59:13 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x101) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000c1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x208, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8801) r2 = pidfd_getfd(r0, r0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000003c0)=0x80000001) syz_io_uring_setup(0x28f1, &(0x7f0000000400)={0x0, 0x195, 0x0, 0x0, 0x3a8, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000003600)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2007, @fd, 0x4, &(0x7f0000003580)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/64, 0x40}, {&(0x7f0000003540)=""/48, 0x30}], 0x5, 0x4}, 0x3ff) r4 = syz_open_dev$vcsn(&(0x7f0000003640), 0x6c00000000000, 0x10000) statx(r2, &(0x7f0000003680)='./file0\x00', 0x0, 0x10, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f00000037c0)={@id={0x2, 0x0, @auto="179e6088b3737cce7af841f709fd029c"}}) getsockname(0xffffffffffffffff, &(0x7f0000003840)=@nl=@proc, &(0x7f00000038c0)=0x80) 04:59:13 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000500)={'geneve0\x00'}) r4 = openat$incfs(0xffffffffffffffff, &(0x7f0000000700)='.log\x00', 0x402, 0x113) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r4, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:59:13 executing program 6: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x6000, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@uname={'uname', 0x3d, '..{$,'}}, {@posixacl}, {@access_any}, {@afid={'afid', 0x3d, 0x9}}, {@cachetag={'cachetag', 0x3d, '-*#$'}}, {@access_uid={'access', 0x3d, r0}}, {@aname}, {@loose}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, '&'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@fowner_lt={'fowner<', r1}}, {@subj_user}]}}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x2, 0x400400) fchownat(r2, &(0x7f0000000500)='./file0\x00', r1, 0xee01, 0x1000) faccessat(r2, &(0x7f0000000540)='./file0\x00', 0x43) symlinkat(&(0x7f0000000580)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00') futimesat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={{0x0, 0x2710}, {0x0, 0x2710}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x840, 0x0) faccessat2(r3, &(0x7f00000006c0)='./file0\x00', 0x80, 0x100) mknodat(r3, &(0x7f0000000700)='./file0/file0\x00', 0x8000, 0x8000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000740)={{0x3, 0x3, 0x40, 0x3, 0x200}, 0x7fff, 0x6, 0x9}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/timer_list\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000800)='./file0/file0\x00', r3, &(0x7f0000000840)='./file0/file0\x00') execveat(r3, &(0x7f0000000880)='./file0\x00', &(0x7f00000009c0)=[&(0x7f00000008c0)='@\'{\'\x00', &(0x7f0000000900)='9p\x00', &(0x7f0000000940)='*', &(0x7f0000000980)='\x00'], &(0x7f0000000c00)=[&(0x7f0000000a00)='trans=fd,', &(0x7f0000000a40)='fowner<', &(0x7f0000000a80)='\\%\x00', &(0x7f0000000ac0)='/dev/vcs#\x00', &(0x7f0000000b00)='$.\x00', &(0x7f0000000b40)='appraise_type=imasig', &(0x7f0000000b80)='/\xf2\\\x00', &(0x7f0000000bc0)=',!\x00'], 0x400) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x3, 0x200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x70, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x4) syz_open_dev$vcsn(&(0x7f0000000dc0), 0x51, 0x40800) 04:59:13 executing program 0: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x3) setns(r1, 0x2000000) setns(r0, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) setns(r0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x20000000) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xee00) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000001c0)={'ip6gretap0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x800) r4 = io_uring_setup(0x4cf3, &(0x7f0000000300)={0x0, 0x7042, 0x4, 0x3, 0x2e4}) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x8) 04:59:13 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x27, 0x8000e, 0x4ae) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x297}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x378}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x104}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xa5, 0x105001) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008040) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c081}, 0x4000) r5 = accept(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000580)=0x80) setsockopt$netlink_NETLINK_PKTINFO(r6, 0x10e, 0x3, &(0x7f00000005c0)=0x53, 0x4) r7 = accept(r6, &(0x7f0000000600)=@x25, &(0x7f0000000680)=0x80) getsockopt$inet6_tcp_int(r7, 0x6, 0xa, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r4) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r8, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48044) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x801) r9 = syz_open_dev$vcsn(&(0x7f0000000980), 0x4, 0x4c0c2) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r9, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0x0, 0x2, 0x70bd2b, 0x8, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x26}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x884) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000c40)=0x7fffffff, 0x4) 04:59:13 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4c890) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000240)={'vxcan1\x00'}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x111100, 0x13) faccessat(r2, &(0x7f00000002c0)='./file0\x00', 0x2d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40002) faccessat(r2, &(0x7f0000000440)='./file0\x00', 0x181) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r1) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x20}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x14008000) fchmodat(r1, &(0x7f00000005c0)='./file0\x00', 0x18) fchmodat(r2, &(0x7f0000000600)='./file0\x00', 0x165) syz_genetlink_get_family_id$fou(&(0x7f0000000640), r4) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x5, 0x79}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x40000010) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0x9e, 0xf8, 0x2, 0x47, @mcast2, @empty, 0x20, 0x1, 0x9, 0x8}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000a00)={0x0, @hci={0x1f, 0x2, 0x4}, @hci={0x1f, 0x3, 0x4}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80}, 0x2c46, 0x0, 0x0, 0x0, 0x7, &(0x7f00000009c0)='netpci0\x00', 0x2, 0x1, 0x3ff}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}}, 0x4000000) 04:59:13 executing program 6: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x6000, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@uname={'uname', 0x3d, '..{$,'}}, {@posixacl}, {@access_any}, {@afid={'afid', 0x3d, 0x9}}, {@cachetag={'cachetag', 0x3d, '-*#$'}}, {@access_uid={'access', 0x3d, r0}}, {@aname}, {@loose}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, '&'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@fowner_lt={'fowner<', r1}}, {@subj_user}]}}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x2, 0x400400) fchownat(r2, &(0x7f0000000500)='./file0\x00', r1, 0xee01, 0x1000) faccessat(r2, &(0x7f0000000540)='./file0\x00', 0x43) symlinkat(&(0x7f0000000580)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00') futimesat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={{0x0, 0x2710}, {0x0, 0x2710}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x840, 0x0) faccessat2(r3, &(0x7f00000006c0)='./file0\x00', 0x80, 0x100) mknodat(r3, &(0x7f0000000700)='./file0/file0\x00', 0x8000, 0x8000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000740)={{0x3, 0x3, 0x40, 0x3, 0x200}, 0x7fff, 0x6, 0x9}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/timer_list\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000800)='./file0/file0\x00', r3, &(0x7f0000000840)='./file0/file0\x00') execveat(r3, &(0x7f0000000880)='./file0\x00', &(0x7f00000009c0)=[&(0x7f00000008c0)='@\'{\'\x00', &(0x7f0000000900)='9p\x00', &(0x7f0000000940)='*', &(0x7f0000000980)='\x00'], &(0x7f0000000c00)=[&(0x7f0000000a00)='trans=fd,', &(0x7f0000000a40)='fowner<', &(0x7f0000000a80)='\\%\x00', &(0x7f0000000ac0)='/dev/vcs#\x00', &(0x7f0000000b00)='$.\x00', &(0x7f0000000b40)='appraise_type=imasig', &(0x7f0000000b80)='/\xf2\\\x00', &(0x7f0000000bc0)=',!\x00'], 0x400) r5 = syz_open_dev$vcsn(&(0x7f0000000c40), 0x3, 0x200) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) syz_open_dev$vcsn(&(0x7f0000000dc0), 0x51, 0x40800) 04:59:13 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) linkat(r2, &(0x7f0000000480)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x400) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = openat$incfs(r4, &(0x7f0000000700)='.log\x00', 0x402, 0x113) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:59:13 executing program 6: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x6000, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@uname={'uname', 0x3d, '..{$,'}}, {@posixacl}, {@access_any}, {@afid={'afid', 0x3d, 0x9}}, {@cachetag={'cachetag', 0x3d, '-*#$'}}, {@access_uid={'access', 0x3d, r0}}, {@aname}, {@loose}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, '&'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@fowner_lt={'fowner<', r1}}, {@subj_user}]}}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x2, 0x400400) fchownat(r2, &(0x7f0000000500)='./file0\x00', r1, 0xee01, 0x1000) faccessat(r2, &(0x7f0000000540)='./file0\x00', 0x43) symlinkat(&(0x7f0000000580)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00') futimesat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={{0x0, 0x2710}, {0x0, 0x2710}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x840, 0x0) faccessat2(r3, &(0x7f00000006c0)='./file0\x00', 0x80, 0x100) mknodat(r3, &(0x7f0000000700)='./file0/file0\x00', 0x8000, 0x8000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000740)={{0x3, 0x3, 0x40, 0x3, 0x200}, 0x7fff, 0x6, 0x9}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/timer_list\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000800)='./file0/file0\x00', r3, &(0x7f0000000840)='./file0/file0\x00') execveat(r3, &(0x7f0000000880)='./file0\x00', &(0x7f00000009c0)=[&(0x7f00000008c0)='@\'{\'\x00', &(0x7f0000000900)='9p\x00', &(0x7f0000000940)='*', &(0x7f0000000980)='\x00'], &(0x7f0000000c00)=[&(0x7f0000000a00)='trans=fd,', &(0x7f0000000a40)='fowner<', &(0x7f0000000a80)='\\%\x00', &(0x7f0000000ac0)='/dev/vcs#\x00', &(0x7f0000000b00)='$.\x00', &(0x7f0000000b40)='appraise_type=imasig', &(0x7f0000000b80)='/\xf2\\\x00', &(0x7f0000000bc0)=',!\x00'], 0x400) syz_open_dev$vcsn(&(0x7f0000000c40), 0x3, 0x200) syz_open_dev$vcsn(&(0x7f0000000dc0), 0x51, 0x40800) 04:59:13 executing program 0: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x3) setns(r1, 0x2000000) setns(r0, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) setns(r0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x20000000) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xee00) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000001c0)={'ip6gretap0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x800) r4 = io_uring_setup(0x4cf3, &(0x7f0000000300)={0x0, 0x7042, 0x4, 0x3, 0x2e4}) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x8) 04:59:13 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x101) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000c1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x208, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8801) r2 = pidfd_getfd(r0, r0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000003c0)=0x80000001) syz_io_uring_setup(0x28f1, &(0x7f0000000400)={0x0, 0x195, 0x0, 0x0, 0x3a8, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000003600)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2007, @fd, 0x4, &(0x7f0000003580)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/64, 0x40}, {&(0x7f0000003540)=""/48, 0x30}], 0x5, 0x4}, 0x3ff) r4 = syz_open_dev$vcsn(&(0x7f0000003640), 0x6c00000000000, 0x10000) statx(r2, &(0x7f0000003680)='./file0\x00', 0x0, 0x10, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f00000037c0)={@id={0x2, 0x0, @auto="179e6088b3737cce7af841f709fd029c"}}) getsockname(0xffffffffffffffff, &(0x7f0000003840)=@nl=@proc, &(0x7f00000038c0)=0x80) 04:59:13 executing program 6: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x6000, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@uname={'uname', 0x3d, '..{$,'}}, {@posixacl}, {@access_any}, {@afid={'afid', 0x3d, 0x9}}, {@cachetag={'cachetag', 0x3d, '-*#$'}}, {@access_uid={'access', 0x3d, r0}}, {@aname}, {@loose}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, '&'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@fowner_lt={'fowner<', r1}}, {@subj_user}]}}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x2, 0x400400) fchownat(r2, &(0x7f0000000500)='./file0\x00', r1, 0xee01, 0x1000) faccessat(r2, &(0x7f0000000540)='./file0\x00', 0x43) symlinkat(&(0x7f0000000580)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00') futimesat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={{0x0, 0x2710}, {0x0, 0x2710}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x840, 0x0) faccessat2(r3, &(0x7f00000006c0)='./file0\x00', 0x80, 0x100) mknodat(r3, &(0x7f0000000700)='./file0/file0\x00', 0x8000, 0x8000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000740)={{0x3, 0x3, 0x40, 0x3, 0x200}, 0x7fff, 0x6, 0x9}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/timer_list\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000800)='./file0/file0\x00', r3, &(0x7f0000000840)='./file0/file0\x00') execveat(r3, &(0x7f0000000880)='./file0\x00', &(0x7f00000009c0)=[&(0x7f00000008c0)='@\'{\'\x00', &(0x7f0000000900)='9p\x00', &(0x7f0000000940)='*', &(0x7f0000000980)='\x00'], &(0x7f0000000c00)=[&(0x7f0000000a00)='trans=fd,', &(0x7f0000000a40)='fowner<', &(0x7f0000000a80)='\\%\x00', &(0x7f0000000ac0)='/dev/vcs#\x00', &(0x7f0000000b00)='$.\x00', &(0x7f0000000b40)='appraise_type=imasig', &(0x7f0000000b80)='/\xf2\\\x00', &(0x7f0000000bc0)=',!\x00'], 0x400) syz_open_dev$vcsn(&(0x7f0000000dc0), 0x51, 0x40800) [ 183.730864] Bluetooth: hci0: command 0x0406 tx timeout [ 183.730986] INFO: task rcu_gp:3 blocked for more than 142 seconds. [ 183.731843] Bluetooth: hci7: command 0x0406 tx timeout [ 183.733048] Not tainted 6.0.0-rc7-next-20220930 #1 [ 183.733087] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 183.733962] Bluetooth: hci6: command 0x0406 tx timeout [ 183.734824] task:rcu_gp state:I [ 183.737022] Bluetooth: hci2: command 0x0406 tx timeout [ 183.738005] stack:30328 pid:3 ppid:2 flags:0x00004000 [ 183.740645] Call Trace: [ 183.741147] [ 183.741571] __schedule+0x893/0x2470 [ 183.742227] ? io_schedule_timeout+0x150/0x150 [ 183.743052] ? do_raw_spin_lock+0x121/0x260 [ 183.743865] ? rwlock_bug.part.0+0x90/0x90 [ 183.744840] schedule+0xda/0x1b0 [ 183.745423] rescuer_thread+0x851/0xdb0 [ 183.746261] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.747309] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.748184] ? lockdep_hardirqs_on+0x79/0x100 [ 183.749095] ? worker_thread+0x1260/0x1260 [ 183.749957] kthread+0x2ed/0x3a0 [ 183.750645] ? kthread_complete_and_exit+0x40/0x40 [ 183.751646] ret_from_fork+0x22/0x30 [ 183.752416] [ 183.752918] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 183.754047] Not tainted 6.0.0-rc7-next-20220930 #1 [ 183.755048] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 183.756503] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 183.758012] Call Trace: [ 183.758584] [ 183.758974] __schedule+0x893/0x2470 [ 183.759761] ? io_schedule_timeout+0x150/0x150 [ 183.760669] ? do_raw_spin_lock+0x121/0x260 [ 183.761500] ? rwlock_bug.part.0+0x90/0x90 [ 183.762259] schedule+0xda/0x1b0 [ 183.762997] rescuer_thread+0x851/0xdb0 [ 183.763721] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.764674] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.765601] ? lockdep_hardirqs_on+0x79/0x100 [ 183.766472] ? worker_thread+0x1260/0x1260 [ 183.767291] kthread+0x2ed/0x3a0 [ 183.767945] ? kthread_complete_and_exit+0x40/0x40 [ 183.768823] ret_from_fork+0x22/0x30 [ 183.769511] [ 183.770000] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 183.771182] Not tainted 6.0.0-rc7-next-20220930 #1 [ 183.772216] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 183.773561] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 183.775058] Call Trace: [ 183.775563] [ 183.775961] __schedule+0x893/0x2470 [ 183.776706] ? io_schedule_timeout+0x150/0x150 [ 183.777556] ? do_raw_spin_lock+0x121/0x260 [ 183.778307] ? rwlock_bug.part.0+0x90/0x90 [ 183.779065] schedule+0xda/0x1b0 [ 183.779679] rescuer_thread+0x851/0xdb0 [ 183.780369] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.781232] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.782083] ? lockdep_hardirqs_on+0x79/0x100 [ 183.782864] ? worker_thread+0x1260/0x1260 [ 183.783629] kthread+0x2ed/0x3a0 [ 183.784202] ? kthread_complete_and_exit+0x40/0x40 [ 183.785036] ret_from_fork+0x22/0x30 [ 183.785711] [ 183.786090] INFO: task netns:6 blocked for more than 143 seconds. [ 183.787083] Not tainted 6.0.0-rc7-next-20220930 #1 [ 183.787951] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 183.789201] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 183.790548] Call Trace: [ 183.790958] [ 183.791329] __schedule+0x893/0x2470 [ 183.792003] ? io_schedule_timeout+0x150/0x150 [ 183.792798] ? do_raw_spin_lock+0x121/0x260 [ 183.793489] ? rwlock_bug.part.0+0x90/0x90 [ 183.794222] schedule+0xda/0x1b0 [ 183.794832] rescuer_thread+0x851/0xdb0 [ 183.795481] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.796326] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.797166] ? lockdep_hardirqs_on+0x79/0x100 [ 183.797937] ? worker_thread+0x1260/0x1260 [ 183.798672] kthread+0x2ed/0x3a0 [ 183.799229] ? kthread_complete_and_exit+0x40/0x40 [ 183.800050] ret_from_fork+0x22/0x30 [ 183.800735] [ 183.801105] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 183.802157] Not tainted 6.0.0-rc7-next-20220930 #1 [ 183.803012] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 183.804224] task:kworker/0:0H state:I stack:29760 pid:8 ppid:2 flags:0x00004000 [ 183.805550] Workqueue: 0x0 (events_highpri) [ 183.806252] Call Trace: [ 183.806702] [ 183.807078] __schedule+0x893/0x2470 [ 183.807726] ? io_schedule_timeout+0x150/0x150 [ 183.808493] schedule+0xda/0x1b0 [ 183.809087] worker_thread+0x15f/0x1260 [ 183.809785] ? process_one_work+0x16a0/0x16a0 [ 183.810503] kthread+0x2ed/0x3a0 [ 183.811090] ? kthread_complete_and_exit+0x40/0x40 [ 183.811905] ret_from_fork+0x22/0x30 [ 183.812574] [ 183.812953] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 183.813995] Not tainted 6.0.0-rc7-next-20220930 #1 [ 183.814874] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 183.816061] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 183.817377] Call Trace: [ 183.817824] [ 183.818191] __schedule+0x893/0x2470 [ 183.818837] ? io_schedule_timeout+0x150/0x150 [ 183.819585] ? do_raw_spin_lock+0x121/0x260 [ 183.820268] ? rwlock_bug.part.0+0x90/0x90 [ 183.820985] schedule+0xda/0x1b0 [ 183.821567] rescuer_thread+0x851/0xdb0 [ 183.822195] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.823006] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.823817] ? lockdep_hardirqs_on+0x79/0x100 [ 183.824577] ? worker_thread+0x1260/0x1260 [ 183.825246] kthread+0x2ed/0x3a0 [ 183.825830] ? kthread_complete_and_exit+0x40/0x40 [ 183.826634] ret_from_fork+0x22/0x30 [ 183.827242] [ 183.827655] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 183.828769] Not tainted 6.0.0-rc7-next-20220930 #1 [ 183.829644] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 183.830855] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 183.832164] Call Trace: [ 183.832596] [ 183.832953] __schedule+0x893/0x2470 [ 183.833580] ? io_schedule_timeout+0x150/0x150 [ 183.834276] ? mark_held_locks+0x9e/0xe0 [ 183.834944] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.835749] schedule+0xda/0x1b0 [ 183.836298] rcu_tasks_one_gp+0x3db/0xc10 [ 183.837007] rcu_tasks_kthread+0x80/0xa0 [ 183.837666] ? rcu_tasks_postscan+0x10/0x10 [ 183.838321] kthread+0x2ed/0x3a0 [ 183.838885] ? kthread_complete_and_exit+0x40/0x40 [ 183.839694] ret_from_fork+0x22/0x30 [ 183.840331] [ 183.888585] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 183.889670] Not tainted 6.0.0-rc7-next-20220930 #1 [ 183.890424] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 183.891575] task:kworker/1:0H state:I stack:29376 pid:21 ppid:2 flags:0x00004000 [ 183.892808] Workqueue: 0x0 (kblockd) [ 183.893374] Call Trace: [ 183.893794] [ 183.894141] __schedule+0x893/0x2470 [ 183.894764] ? io_schedule_timeout+0x150/0x150 [ 183.895456] schedule+0xda/0x1b0 [ 183.896002] worker_thread+0x15f/0x1260 [ 183.896654] ? process_one_work+0x16a0/0x16a0 [ 183.897305] kthread+0x2ed/0x3a0 [ 183.897847] ? kthread_complete_and_exit+0x40/0x40 [ 183.898594] ret_from_fork+0x22/0x30 [ 183.899165] [ 183.899498] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 183.900485] Not tainted 6.0.0-rc7-next-20220930 #1 [ 183.901257] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 183.902349] task:inet_frag_wq state:I stack:30360 pid:23 ppid:2 flags:0x00004000 [ 183.903552] Call Trace: [ 183.903922] [ 183.904264] __schedule+0x893/0x2470 [ 183.904855] ? io_schedule_timeout+0x150/0x150 [ 183.905510] ? do_raw_spin_lock+0x121/0x260 [ 183.906177] ? rwlock_bug.part.0+0x90/0x90 [ 183.906833] schedule+0xda/0x1b0 [ 183.907334] rescuer_thread+0x851/0xdb0 [ 183.907951] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.908777] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.909510] ? lockdep_hardirqs_on+0x79/0x100 [ 183.910205] ? worker_thread+0x1260/0x1260 [ 183.910867] kthread+0x2ed/0x3a0 [ 183.911353] ? kthread_complete_and_exit+0x40/0x40 [ 183.912099] ret_from_fork+0x22/0x30 [ 183.912703] [ 183.913046] INFO: task kblockd:31 blocked for more than 143 seconds. [ 183.913989] Not tainted 6.0.0-rc7-next-20220930 #1 [ 183.914754] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 183.915870] task:kblockd state:I stack:30176 pid:31 ppid:2 flags:0x00004000 [ 183.917080] Call Trace: [ 183.917463] [ 183.917844] __schedule+0x893/0x2470 [ 183.918396] ? io_schedule_timeout+0x150/0x150 [ 183.919087] ? do_raw_spin_lock+0x121/0x260 [ 183.919750] ? rwlock_bug.part.0+0x90/0x90 [ 183.920380] schedule+0xda/0x1b0 [ 183.920937] rescuer_thread+0x851/0xdb0 [ 183.921510] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.922241] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 183.923000] ? lockdep_hardirqs_on+0x79/0x100 [ 183.923683] ? worker_thread+0x1260/0x1260 [ 183.924316] kthread+0x2ed/0x3a0 [ 183.924857] ? kthread_complete_and_exit+0x40/0x40 [ 183.925582] ret_from_fork+0x22/0x30 [ 183.926136] [ 183.926566] [ 183.926566] Showing all locks held in the system: [ 183.927423] 1 lock held by rcu_tasks_kthre/11: [ 183.928085] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 183.929469] 1 lock held by khungtaskd/25: [ 183.930082] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 183.931376] 2 locks held by in:imklog/189: [ 183.932036] 2 locks held by syz-executor/5810: [ 183.932749] [ 183.933013] ============================================= [ 183.933013] 04:59:27 executing program 2: r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000000)='.pending_reads\x00', 0x40000, 0x8) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x8040}, 0x40041) mkdirat(r0, &(0x7f0000000140)='./file0\x00', 0x187) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/crypto\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f00000001c0)='./file0\x00', 0x6000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x2) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000200)=0x2, 0x4) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x20bc0, 0x8) renameat2(r3, &(0x7f0000000280)='./file0\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x1) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r0) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000c00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000380)={0x82c, r5, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x1d4, 0x8, 0x0, 0x1, [{0x128, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0xc6b4973790e8deca}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5af5, @local, 0x7fff}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "335e29a038aa322a30bec7a4b5498d7853544b9b44093bed8a69349381de097f"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ALLOWEDIPS={0xa8, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8001}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x80}]}, {0xa8, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ada54ec4a6d73e78168a00333f47d3bd45525a5fa31890f49c24a311b1e62003"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_PEERS={0x618, 0x8, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3f}]}, {0x78, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70a39f08ef8bfdf1fb370321a44295f788d85d1949194d30ef3fa9a65c50d7ff"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1000, @mcast1, 0x8}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @private=0xa010100}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x4b0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xffff9333, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10001}}, @WGPEER_A_ALLOWEDIPS={0x420, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x22}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}]}, {0x13c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x5}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7ff, @rand_addr=' \x01\x00'}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cc8c1e01146f789598af98d42cb7b81ca6361b7baab0f8ecfa532fe6b667124f"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}}]}, {0x94, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "b2e4bce00d3802b662d1c3109756914ea5bf6db00b207a015a5230a1a55af905"}, @WGPEER_A_ALLOWEDIPS={0x50, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}]}]}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x80000001, @local, 0x7}}]}]}]}, 0x82c}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) getpeername$netlink(r0, &(0x7f0000000c40), &(0x7f0000000c80)=0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000cc0)=0x18, 0x4) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000d00)=0x41e3) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000d40)={'veth1_vlan\x00'}) faccessat(r3, &(0x7f0000000d80)='./file0\x00', 0x4) bind$netlink(r2, &(0x7f0000000dc0)={0x10, 0x0, 0x25dfdbfc, 0xb00}, 0xc) mknodat$loop(r1, &(0x7f0000000e00)='./file0/../file0\x00', 0xc000, 0x0) 04:59:27 executing program 1: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0x10000, 0x140) waitid$P_PIDFD(0x3, r0, 0x0, 0x8, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040), 0x8080, 0x0) process_madvise(r1, &(0x7f00000004c0)=[{&(0x7f0000000080)="5c389caf4c0eaece262071eb10f415245d476a898f0b24a36dc573461b749da861d96e64457eac33729e23dc66", 0x2d}, {&(0x7f00000000c0)="7855b3600ef9050e560b14185a79fea1b10222591db422849654069d009c00b0244ad9aacfaba6755b94da7fb0d80c8e57463a86d04b9f7dc740a3ee7594da6d59135771d2a7efcd67ab3b0f5d9113e0a64072fdabd0f4269d8716035b53a3cd29dd4462cda873b85fe32f21354c11af50a1ad72bb5b80bd5c99726ff7f3dc2bdb5e2f3c04b57577ce8c", 0x8a}, {&(0x7f0000000180)="e742287a30e52981e6e0ae55f532815c60547058df37f3e2e41416c2a9a3de17ab3532af208759c4884c96b97d7b80817ac9fa5597515edd489e647a8a61e228904fcbcac2c4d3a74446c388040acf377f5c0ca33931a868a6cb1312a5706dd7fd33040a546e73a914aa38e4d4f433d7b3c72a2bd187397936b19708f46300fa53609356f3185503fd0a6d85318076bb9df1192612cb79d974964085c6660be2bf9e2452c4392ac50e6fbcdbb7aae23e6d5cc9db54d87609cf20863bf74a3b306d49bc0c9d6e3fdd38267294ca145bf2a933f65757e11aee9c448de175557e8f9490", 0xe2}, {&(0x7f0000000280)="e7996a0abf37ec27f9299af8c4add3cdaab1641ee5a06d46b961b90b683c9c964125b130144f8aa2ae7fc8e358048ef85a5b0125282fee8491ff0970253793ec0a223d67", 0x44}, {&(0x7f0000000300)="e2f4dd9e61732653b3a7406a97f1b0429d7481a26245b466aadff2d4da131e0ba7da1b2a0c6f061b174678837bb86ec32df41e60a3ba679b1d7c098949b1e12c2974f6b94f8baa55a34d26a46771abf5b8833ed0c16cb8f5c0c47d73ebcedf208faa7d794d890848cc2448d7c1eb5b08624ab548adca4e51c2c117878743bd60f7b27600f8e3fb", 0x87}, {&(0x7f00000003c0)="c835e9b2dc814ffdc657dc15bea249b91df4b60293245fd4b1364bf7c112c0fd7d39e2477c7ea8e26fd5f04ae5f97ab1ffce1120dae1e713551b8f45b41866efb74511801accc7a6a901a7861c", 0x4d}, {&(0x7f0000000440)="7bfc039bace010342ff59378c150f30714cda0fd7bfbc6b20b10dcc3ff4401f6062bf54cc6b70488ec52ac3d4f14d74ed7cab11f73d5b704292aaf10c4c80025629ceb544e4ab40c6c757e8e211396e6e3a84951", 0x54}], 0x7, 0x3, 0x0) getdents64(r0, &(0x7f0000000540)=""/94, 0x5e) r2 = syz_open_dev$vcsn(&(0x7f00000005c0), 0x6, 0x200) pidfd_send_signal(r2, 0x4, &(0x7f0000000600)={0x0, 0x3ff, 0x8}, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000840)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000800)={&(0x7f0000000700)={0x100, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x400, 0x36}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xa6, 0xbe, "2a15007a434fcdaefe1f9d0dc60a71f7c4f38b736551a6a147f2f515bab498795190b5c5b4cd5bd276a9e5175e716271cc845e4a1d8ad7a42b4b659c3e4f855fbe33e54df31391461021a5b544d21b56261be5a370822d3c0c831781e379ca93fc71b8e28ae90b9acee09f21ee5de39272b28a81818bc1940415c578ddbb2bb755bb9713bc99dc8559c205a05b70c3e2925c41ed87931892f5f5b8c0a4eca7fe50f5"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x3}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xf000}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x100}, 0x1, 0x0, 0x0, 0x61}, 0x8000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000880)='/proc/zoneinfo\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000008c0)={{0x2, 0x3, 0x7, 0x2, 0x7fffffff}, 0x7f, 0x7ff, 'id1\x00', 'timer1\x00', 0x0, 0x80000000000000, 0xd4, 0x1f, 0x5}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000009c0)={0x1f, @none}, 0x8) epoll_create1(0x0) accept(r4, &(0x7f0000000a00)=@ieee802154={0x24, @long}, &(0x7f0000000a80)=0x80) getsockopt$bt_sco_SCO_OPTIONS(r4, 0x11, 0x1, &(0x7f0000000ac0)=""/20, &(0x7f0000000b00)=0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000b40)='/proc/bus/input/handlers\x00', 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000c80)=@IORING_OP_FADVISE={0x18, 0x0, 0x0, @fd, 0x9, 0x0, 0x80, 0x3, 0x371fda50eed2a68}, 0x7f) 04:59:27 executing program 6: statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000200)='./file0/file0\x00', 0x6000, 0x40, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x80, &(0x7f0000000340)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_user}, {@uname={'uname', 0x3d, '..{$,'}}, {@posixacl}, {@access_any}, {@afid={'afid', 0x3d, 0x9}}, {@cachetag={'cachetag', 0x3d, '-*#$'}}, {@access_uid={'access', 0x3d, r0}}, {@aname}, {@loose}], [{@dont_appraise}, {@obj_type={'obj_type', 0x3d, '&'}}, {@appraise_type}, {@euid_eq={'euid', 0x3d, r0}}, {@fowner_lt={'fowner<', r0}}, {@smackfsdef={'smackfsdef', 0x3d, '*'}}, {@fowner_lt={'fowner<', r1}}, {@subj_user}]}}) r2 = syz_open_dev$vcsn(&(0x7f00000004c0), 0x2, 0x400400) fchownat(r2, &(0x7f0000000500)='./file0\x00', r1, 0xee01, 0x1000) faccessat(r2, &(0x7f0000000540)='./file0\x00', 0x43) symlinkat(&(0x7f0000000580)='./file0\x00', r2, &(0x7f00000005c0)='./file0\x00') futimesat(r2, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={{0x0, 0x2710}, {0x0, 0x2710}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0/file0\x00', 0x840, 0x0) faccessat2(r3, &(0x7f00000006c0)='./file0\x00', 0x80, 0x100) mknodat(r3, &(0x7f0000000700)='./file0/file0\x00', 0x8000, 0x8000) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000740)={{0x3, 0x3, 0x40, 0x3, 0x200}, 0x7fff, 0x6, 0x9}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/timer_list\x00', 0x0, 0x0) renameat(r4, &(0x7f0000000800)='./file0/file0\x00', r3, &(0x7f0000000840)='./file0/file0\x00') execveat(r3, &(0x7f0000000880)='./file0\x00', &(0x7f00000009c0)=[&(0x7f00000008c0)='@\'{\'\x00', &(0x7f0000000900)='9p\x00', &(0x7f0000000940)='*', &(0x7f0000000980)='\x00'], &(0x7f0000000c00)=[&(0x7f0000000a00)='trans=fd,', &(0x7f0000000a40)='fowner<', &(0x7f0000000a80)='\\%\x00', &(0x7f0000000ac0)='/dev/vcs#\x00', &(0x7f0000000b00)='$.\x00', &(0x7f0000000b40)='appraise_type=imasig', &(0x7f0000000b80)='/\xf2\\\x00', &(0x7f0000000bc0)=',!\x00'], 0x400) syz_open_dev$vcsn(&(0x7f0000000dc0), 0x51, 0x40800) 04:59:27 executing program 4: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed}, &(0x7f00000000c0)=0x80) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x38}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x4c890) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000240)={'vxcan1\x00'}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000280)='.pending_reads\x00', 0x111100, 0x13) faccessat(r2, &(0x7f00000002c0)='./file0\x00', 0x2d) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x40002) faccessat(r2, &(0x7f0000000440)='./file0\x00', 0x181) r4 = socket$netlink(0x10, 0x3, 0x14) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r1) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r5, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x20}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x14008000) fchmodat(r1, &(0x7f00000005c0)='./file0\x00', 0x18) fchmodat(r2, &(0x7f0000000600)='./file0\x00', 0x165) syz_genetlink_get_family_id$fou(&(0x7f0000000640), r4) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x4c, r3, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x5, 0x79}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x13}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x70}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40044}, 0x40000010) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000880)={'sit0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x2f, 0x9e, 0xf8, 0x2, 0x47, @mcast2, @empty, 0x20, 0x1, 0x9, 0x8}}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000a00)={0x0, @hci={0x1f, 0x2, 0x4}, @hci={0x1f, 0x3, 0x4}, @rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80}, 0x2c46, 0x0, 0x0, 0x0, 0x7, &(0x7f00000009c0)='netpci0\x00', 0x2, 0x1, 0x3ff}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x34}}, 0x4000000) 04:59:27 executing program 0: r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x3) setns(r1, 0x2000000) setns(r0, 0x4000000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) r3 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000080)) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0xee00) setns(r0, 0x0) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x20000000) ioctl$TUNSETOWNER(r3, 0x400454cc, 0xee00) ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f00000001c0)={'ip6gretap0\x00'}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41}, 0x800) r4 = io_uring_setup(0x4cf3, &(0x7f0000000300)={0x0, 0x7042, 0x4, 0x3, 0x2e4}) r5 = pidfd_getfd(r3, r4, 0x0) ioctl$TUNSETSNDBUF(r5, 0x400454d4, &(0x7f0000000380)=0x8) 04:59:27 executing program 3: ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x60, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FLAGS={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000090}, 0x240000d1) shmget(0x1, 0x4000, 0x1, &(0x7f0000ffb000/0x4000)=nil) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r2 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x2, 0x301000) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x400, 0x1}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x74, r1, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x20040054) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) ioctl$SNDRV_TIMER_IOCTL_STATUS64(r2, 0x80605414, &(0x7f0000000400)) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/asound/seq/clients\x00', 0x0, 0x0) r5 = openat$incfs(r4, &(0x7f0000000700)='.log\x00', 0x402, 0x113) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000780)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r5, 0x0, &(0x7f0000000740)='./file0\x00', 0x14c, 0x440080, 0x12345}, 0x101) 04:59:27 executing program 5: syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket(0x27, 0x8000e, 0x4ae) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x104, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7fffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x297}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x378}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1464}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x1}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3c}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x800}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x5}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]]}, 0x104}, 0x1, 0x0, 0x0, 0x20040000}, 0x4) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0xa5, 0x105001) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4008040) r4 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x40, r1, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x68}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c081}, 0x4000) accept(0xffffffffffffffff, &(0x7f0000000500)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000580)=0x80) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f00000005c0)=0x53, 0x4) r6 = accept(r5, &(0x7f0000000600)=@x25, &(0x7f0000000680)=0x80) getsockopt$inet6_tcp_int(r6, 0x6, 0xa, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000780), r4) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r7, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48044) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x801) r8 = syz_open_dev$vcsn(&(0x7f0000000980), 0x4, 0x4c0c2) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x5c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r8, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0x0, 0x2, 0x70bd2b, 0x8, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x26}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000001}, 0x884) 04:59:27 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x101) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000c1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x208, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8801) r2 = pidfd_getfd(r0, r0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000003c0)=0x80000001) syz_io_uring_setup(0x28f1, &(0x7f0000000400)={0x0, 0x195, 0x0, 0x0, 0x3a8, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000003600)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2007, @fd, 0x4, &(0x7f0000003580)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/64, 0x40}, {&(0x7f0000003540)=""/48, 0x30}], 0x5, 0x4}, 0x3ff) r4 = syz_open_dev$vcsn(&(0x7f0000003640), 0x6c00000000000, 0x10000) statx(r2, &(0x7f0000003680)='./file0\x00', 0x0, 0x10, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc080661a, &(0x7f00000037c0)={@id={0x2, 0x0, @auto="179e6088b3737cce7af841f709fd029c"}}) getsockname(0xffffffffffffffff, &(0x7f0000003840)=@nl=@proc, &(0x7f00000038c0)=0x80) 04:59:27 executing program 7: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000000)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x101) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008084}, 0x40000c1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg0\x00'}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, r1, 0x208, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x8801) r2 = pidfd_getfd(r0, r0, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f00000003c0)=0x80000001) syz_io_uring_setup(0x28f1, &(0x7f0000000400)={0x0, 0x195, 0x0, 0x0, 0x3a8, 0x0, r2}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000480), &(0x7f00000004c0)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000003600)=@IORING_OP_READV=@pass_iovec={0x1, 0x3, 0x2007, @fd, 0x4, &(0x7f0000003580)=[{&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/64, 0x40}, {&(0x7f0000003540)=""/48, 0x30}], 0x5, 0x4}, 0x3ff) r4 = syz_open_dev$vcsn(&(0x7f0000003640), 0x6c00000000000, 0x10000) statx(r2, &(0x7f0000003680)='./file0\x00', 0x0, 0x10, &(0x7f00000036c0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETOWNER(r4, 0x400454cc, r5) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockname(r6, &(0x7f0000003840)=@nl=@proc, &(0x7f00000038c0)=0x80) VM DIAGNOSIS: 04:59:18 Registers: info registers vcpu 0 RAX=0000000000000075 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823bb0f1 RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff888035fe7768 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000075 R11=0000000000000001 R12=0000000000000075 R13=ffffffff8765a960 R14=0000000000000010 R15=ffffffff823bb0e0 RIP=ffffffff823bb149 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe42ec7c88 CR3=000000000ee06000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 415406b400000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000000 RBX=0000000000000001 RCX=0000000000000000 RDX=ffff888008901ac0 RSI=ffffffff812c6586 RDI=0000000000000001 RBP=ffff88800902fd20 RSP=ffff88800902fce8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=000000000000001c R13=ffff888035fcb580 R14=0000000000000200 R15=ffff88800902fd70 RIP=ffffffff812c6588 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fffc5faa080 CR3=0000000015f8c000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 652e29646e616d6d 6f632a282e637069 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 45474e5554246c74 636f69203d203072 YMM05=0000000000000000 0000000000000000 7830202c3078307b 3d29303033303030 YMM06=0000000000000000 0000000000000000 202c337830202c34 7830202c32343037 YMM07=0000000000000000 0000000000000000 646970203d203572 0a297d3465327830 YMM08=0000000000000000 0000000000000000 2c3472202c337228 64667465675f6466 YMM09=0000000000000000 0000000000000000 534e5554246c7463 6f690a2930783020 YMM10=0000000000000000 0000000000000000 347830202c357228 465542444e535445 YMM11=0000000000000000 0000000000000000 3066377830282620 2c34643435343030 YMM12=0000000000000000 0000000000000000 0a293878303d2930 3833303030303030 YMM13=0000000000000000 0000000000000000 5645445445474e55 54246c74636f6920 YMM14=0000000000000000 0000000000000000 6666666666666666 783028534e54454e YMM15=0000000000000000 0000000000000000 336534357830202c 6666666666666666