Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:5397' (ECDSA) to the list of known hosts. 2022/09/30 13:02:05 fuzzer started 2022/09/30 13:02:05 dialing manager at localhost:40535 syzkaller login: [ 35.627871] cgroup: Unknown subsys name 'net' [ 35.727415] cgroup: Unknown subsys name 'rlimit' 2022/09/30 13:02:22 syscalls: 201 2022/09/30 13:02:22 code coverage: enabled 2022/09/30 13:02:22 comparison tracing: enabled 2022/09/30 13:02:22 extra coverage: enabled 2022/09/30 13:02:22 setuid sandbox: enabled 2022/09/30 13:02:22 namespace sandbox: enabled 2022/09/30 13:02:22 Android sandbox: enabled 2022/09/30 13:02:22 fault injection: enabled 2022/09/30 13:02:22 leak checking: enabled 2022/09/30 13:02:22 net packet injection: enabled 2022/09/30 13:02:22 net device setup: enabled 2022/09/30 13:02:22 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/09/30 13:02:22 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/09/30 13:02:22 USB emulation: enabled 2022/09/30 13:02:22 hci packet injection: enabled 2022/09/30 13:02:22 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220929) 2022/09/30 13:02:22 802.15.4 emulation: enabled 2022/09/30 13:02:22 fetching corpus: 0, signal 0/0 (executing program) 2022/09/30 13:02:23 starting 8 fuzzer processes 13:02:23 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x7fffffff, 0x200, 0x0, 0x2}, 0x14) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x946d, @any, 0x7ff}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2a4040, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='pids.events\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0)={0x712, 0x1ff, 0x38, 0x96e}, 0x14) timerfd_create(0xd, 0xc00) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0xc) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000480)=@ccm_128={{0x304}, "3db1cd5723571765", "69af84c301339d67a7a4d964fbe4ff36", "6237b100", "76613e99558f0b1b"}, 0x28) 13:02:23 executing program 4: getgroups(0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) getgroups(0x7, &(0x7f0000000040)=[0xee00, 0xee00, 0xee01, 0xee00, 0xee01, 0xee00, 0x0]) r6 = getegid() getgroups(0x9, &(0x7f0000000080)=[0xee01, 0x0, 0xffffffffffffffff, r0, 0xee01, r3, r6, 0x0, 0xee01]) getgroups(0x4, &(0x7f00000000c0)=[r8, 0xee00, r6, r5]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x9, &(0x7f0000000100)=0x6, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r10 = getegid() getgroups(0x2, &(0x7f0000000180)=[r1, r2]) getgroups(0x3, &(0x7f00000001c0)=[r4, r10, r11]) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x73}, @void, @val={0xc, 0x99, {0xa7, 0x2a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4a}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r13 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x222001, 0x0) getsockopt$bt_BT_FLUSHABLE(r13, 0x112, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000480)='cdg\x00', 0x4) getgroups(0x3, &(0x7f00000004c0)=[r9, r6, 0xee01]) getgroups(0x1, &(0x7f0000000500)=[r7]) setresgid(r15, r12, r16) openat$cgroup_subtree(r13, &(0x7f0000000540), 0x2, 0x0) 13:02:23 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3a76}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff4428}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x406}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5e}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffe01}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020001}, 0x8080) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004001}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.stat\x00', 0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x400000, 0x0) timerfd_settime(r5, 0xe54a4085b409493a, &(0x7f0000000680)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000006c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000740)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x18, 0x0, "8b8e9a4acf05a9d2548892afe2520b0ce3f3a7b2729419421c4f7f30b0b44a7ade5fc381e250d09589926ddb8abb0081ffdb6893472c53323a1fa2c574e02f8c8176e6d49828bd251c7c034b673476e2"}, 0xd8) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000840), 0x2) r8 = openat$cgroup_ro(r5, &(0x7f0000000880)='memory.events.local\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb8, 0x0, 0x410, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r3) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x144, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x40) 13:02:23 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x1f, "784287"}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8000, 0x50}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3c0fb82a0dcb55632c4e409dc4433af2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6598145d68f8bcdd6cf0551e0914e9ce58d91696387dea7e772ede9ead05df1c"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x400c004) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x214000, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000002c0)={0x7}, 0x2) clone3(&(0x7f0000000580)={0x2000, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0), {0x14}, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000480)=""/131, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x61}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008001}, 0x4005) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040814}, 0x4000084) socketpair(0x11, 0x2, 0x6, &(0x7f0000000800)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r2) r7 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44810}, 0x4090) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x7, 0x4, 0x3, 0x5, 0x0, 0xfffffffffffff26b, 0x1000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x5, 0x10000}, 0x10820, 0x87d, 0x7f, 0x8, 0x3ff, 0x3, 0x4, 0x0, 0x104634cd, 0x0, 0x2}, r3, 0x5, r8, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000851) [ 52.712655] audit: type=1400 audit(1664542943.581:6): avc: denied { execmem } for pid=283 comm="syz-executor.4" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 13:02:23 executing program 7: r0 = getegid() r1 = getegid() getgroups(0x9, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) getgroups(0x7, &(0x7f0000000040)=[0x0, 0xee00, r0, 0x0, r1, r4, 0x0]) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @none, 0x7, 0x1}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x101, 0x85, 0x3710, 0x50e5}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) getegid() ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000180)) r9 = semget$private(0x0, 0x2, 0x240) semctl$GETNCNT(r9, 0x2, 0xe, &(0x7f0000000200)=""/221) socketpair(0x15, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000340)=0x69510b4a, &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r12 = syz_io_uring_setup(0x7139, &(0x7f0000000400)={0x0, 0x7df9, 0x2, 0x0, 0x2e4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r12, 0x8000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/86, 0x56, 0x0, &(0x7f0000000580)=""/236, 0xec}, &(0x7f00000006c0)=0x40) getgroups(0x1, &(0x7f0000000700)=[r5]) getgroups(0x4, &(0x7f0000000740)=[r4, r6, 0x0, r0]) getgroups(0xa, &(0x7f0000000780)=[r2, 0xffffffffffffffff, r7, r6, r13, r14, r3, r8, r8, r7]) 13:02:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = clone3(&(0x7f0000000280)={0x100200000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/93, 0x5d, &(0x7f0000000180)=""/168, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x80, 0x8, 0x3, 0xc1, 0x0, 0xfff, 0x40001, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x4}, 0x40000, 0xff, 0x3, 0x3, 0x6400, 0x1, 0x1, 0x0, 0x3}, r7, 0xf, 0xffffffffffffffff, 0x0) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setns(r8, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x123800, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x810) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) clone3(&(0x7f0000000b40)={0x1102000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0, {0x8}, &(0x7f00000009c0)=""/32, 0x20, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=[r2, r2, r2, r2, r1, r2, r1, 0x0], 0x8, {r5}}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r11, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r12}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:02:23 executing program 5: sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x28}}, 0x8800) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30308a0a}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffc7, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x2c}}, 0xc0c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x124b57b}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfa52}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x10000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200408c5) socketpair(0x6, 0x4, 0xffffffff, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f0000000740)={0x1f, 0x52d, @none, 0x1000, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'netpci0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x4, 0x77, 0x7, 0xffff, 0x42, @private1, @mcast1, 0x40, 0x8, 0x9}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0x100, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8050}, 0x8890) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x59}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, r9, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf24, 0xe}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x80}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008870}, 0x8000) 13:02:23 executing program 6: socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0x100, "e75e04"}, 0x6) socketpair(0x10, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000180), &(0x7f00000001c0)=0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000088) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/206, 0xce, 0x0, &(0x7f0000000400)=""/147, 0x93}, &(0x7f0000000500)=0x40) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x60}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x63}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4004845) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000008c0)) pselect6(0x40, &(0x7f0000000900)={0x0, 0x6, 0x7, 0x8001, 0x0, 0x80, 0x7, 0x1f}, &(0x7f0000000940)={0x1, 0xb5a, 0x1ff, 0x10000, 0x101, 0x5, 0x100000000, 0xcb5}, &(0x7f0000000980)={0x10000, 0x100000001, 0x3, 0x4, 0x20, 0xa77, 0x54, 0x5}, &(0x7f00000009c0)={0x77359400}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0x4]}, 0x8}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a80), r7) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x1010000, &(0x7f0000000b40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_9p2000}, {@access_user}, {@access_user}, {@afid={'afid', 0x3d, 0xffff}}], [{@smackfshat={'smackfshat', 0x3d, 'wlan1\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x34, 0x35, 0x31, 0x31, 0x65, 0x31, 0x32], 0x2d, [0x37, 0x62, 0x5e, 0x37], 0x2d, [0x64, 0x62, 0x33, 0x35], 0x2d, [0x39, 0x2, 0x38, 0x36], 0x2d, [0x63, 0x63, 0x33, 0x31, 0x65, 0x33, 0x66, 0x34]}}}, {@subj_user={'subj_user', 0x3d, 'wlan1\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '$,'}}]}}) [ 54.057824] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.060494] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.062072] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.063668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.066223] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.067963] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.069251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.073852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.083291] Bluetooth: hci0: HCI_REQ-0x0c1a [ 54.125048] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.126700] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.138677] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 54.144422] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.145787] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.147394] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 54.148472] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.149599] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.150861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 54.154936] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.158160] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 54.159454] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.160689] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.162637] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 54.164079] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.169051] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 54.172780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.173848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.176084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.186265] Bluetooth: hci5: HCI_REQ-0x0c1a [ 54.189282] Bluetooth: hci3: HCI_REQ-0x0c1a [ 54.202271] Bluetooth: hci2: HCI_REQ-0x0c1a [ 54.212823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 54.214474] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 54.215848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 54.218803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 54.218892] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.221776] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 54.223137] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.225003] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.226738] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 54.229289] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 54.230826] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.231911] Bluetooth: hci1: HCI_REQ-0x0c1a [ 54.236719] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 54.238878] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 54.240715] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.242877] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 54.243022] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 54.248477] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 54.248522] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 54.251152] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.251876] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 54.253402] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.257639] Bluetooth: hci7: HCI_REQ-0x0c1a [ 54.266043] Bluetooth: hci6: HCI_REQ-0x0c1a [ 54.282320] Bluetooth: hci4: HCI_REQ-0x0c1a [ 56.144612] Bluetooth: hci0: command 0x0409 tx timeout [ 56.208441] Bluetooth: hci3: command 0x0409 tx timeout [ 56.209099] Bluetooth: hci5: command 0x0409 tx timeout [ 56.272379] Bluetooth: hci1: command 0x0409 tx timeout [ 56.273103] Bluetooth: hci2: command 0x0409 tx timeout [ 56.274081] Bluetooth: hci6: command 0x0409 tx timeout [ 56.337279] Bluetooth: hci4: command 0x0409 tx timeout [ 56.337973] Bluetooth: hci7: command 0x0409 tx timeout [ 58.192361] Bluetooth: hci0: command 0x041b tx timeout [ 58.256327] Bluetooth: hci5: command 0x041b tx timeout [ 58.256785] Bluetooth: hci3: command 0x041b tx timeout [ 58.320333] Bluetooth: hci6: command 0x041b tx timeout [ 58.320770] Bluetooth: hci2: command 0x041b tx timeout [ 58.321157] Bluetooth: hci1: command 0x041b tx timeout [ 58.384350] Bluetooth: hci7: command 0x041b tx timeout [ 58.384776] Bluetooth: hci4: command 0x041b tx timeout [ 60.240288] Bluetooth: hci0: command 0x040f tx timeout [ 60.304730] Bluetooth: hci3: command 0x040f tx timeout [ 60.305169] Bluetooth: hci5: command 0x040f tx timeout [ 60.368337] Bluetooth: hci1: command 0x040f tx timeout [ 60.368763] Bluetooth: hci2: command 0x040f tx timeout [ 60.369172] Bluetooth: hci6: command 0x040f tx timeout [ 60.432275] Bluetooth: hci4: command 0x040f tx timeout [ 60.432711] Bluetooth: hci7: command 0x040f tx timeout [ 62.288322] Bluetooth: hci0: command 0x0419 tx timeout [ 62.352287] Bluetooth: hci5: command 0x0419 tx timeout [ 62.352740] Bluetooth: hci3: command 0x0419 tx timeout [ 62.416316] Bluetooth: hci6: command 0x0419 tx timeout [ 62.416769] Bluetooth: hci2: command 0x0419 tx timeout [ 62.417163] Bluetooth: hci1: command 0x0419 tx timeout [ 62.480312] Bluetooth: hci7: command 0x0419 tx timeout [ 62.480768] Bluetooth: hci4: command 0x0419 tx timeout [ 106.010604] audit: type=1400 audit(1664542996.879:7): avc: denied { open } for pid=3710 comm="syz-executor.3" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 13:03:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = clone3(&(0x7f0000000280)={0x100200000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/93, 0x5d, &(0x7f0000000180)=""/168, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x80, 0x8, 0x3, 0xc1, 0x0, 0xfff, 0x40001, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x4}, 0x40000, 0xff, 0x3, 0x3, 0x6400, 0x1, 0x1, 0x0, 0x3}, r7, 0xf, 0xffffffffffffffff, 0x0) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setns(r8, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x123800, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x810) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) clone3(&(0x7f0000000b40)={0x1102000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0, {0x8}, &(0x7f00000009c0)=""/32, 0x20, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=[r2, r2, r2, r2, r1, r2, r1, 0x0], 0x8, {r5}}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r11, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r12}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:03:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = clone3(&(0x7f0000000280)={0x100200000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/93, 0x5d, &(0x7f0000000180)=""/168, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x80, 0x8, 0x3, 0xc1, 0x0, 0xfff, 0x40001, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x4}, 0x40000, 0xff, 0x3, 0x3, 0x6400, 0x1, 0x1, 0x0, 0x3}, r7, 0xf, 0xffffffffffffffff, 0x0) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setns(r8, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x123800, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x810) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) clone3(&(0x7f0000000b40)={0x1102000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0, {0x8}, &(0x7f00000009c0)=""/32, 0x20, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=[r2, r2, r2, r2, r1, r2, r1, 0x0], 0x8, {r5}}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r11, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r12}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:03:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = clone3(&(0x7f0000000280)={0x100200000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/93, 0x5d, &(0x7f0000000180)=""/168, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x80, 0x8, 0x3, 0xc1, 0x0, 0xfff, 0x40001, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x4}, 0x40000, 0xff, 0x3, 0x3, 0x6400, 0x1, 0x1, 0x0, 0x3}, r7, 0xf, 0xffffffffffffffff, 0x0) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setns(r8, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x123800, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x810) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r0) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) clone3(&(0x7f0000000b40)={0x1102000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0, {0x8}, &(0x7f00000009c0)=""/32, 0x20, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=[r2, r2, r2, r2, r1, r2, r1, 0x0], 0x8, {r5}}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, r11, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r12}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:03:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = clone3(&(0x7f0000000280)={0x100200000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/93, 0x5d, &(0x7f0000000180)=""/168, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x80, 0x8, 0x3, 0xc1, 0x0, 0xfff, 0x40001, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x4}, 0x40000, 0xff, 0x3, 0x3, 0x6400, 0x1, 0x1, 0x0, 0x3}, r7, 0xf, 0xffffffffffffffff, 0x0) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setns(r8, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x123800, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x810) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r0) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) clone3(&(0x7f0000000b40)={0x1102000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0x8}, &(0x7f00000009c0)=""/32, 0x20, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=[r2, r2, r2, r2, r1, r2, r1, 0x0], 0x8, {r5}}, 0x58) 13:03:42 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x1f, "784287"}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8000, 0x50}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3c0fb82a0dcb55632c4e409dc4433af2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6598145d68f8bcdd6cf0551e0914e9ce58d91696387dea7e772ede9ead05df1c"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x400c004) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x214000, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000002c0)={0x7}, 0x2) clone3(&(0x7f0000000580)={0x2000, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0), {0x14}, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000480)=""/131, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x61}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008001}, 0x4005) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040814}, 0x4000084) socketpair(0x11, 0x2, 0x6, &(0x7f0000000800)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r2) r7 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44810}, 0x4090) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x7, 0x4, 0x3, 0x5, 0x0, 0xfffffffffffff26b, 0x1000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x5, 0x10000}, 0x10820, 0x87d, 0x7f, 0x8, 0x3ff, 0x3, 0x4, 0x0, 0x104634cd, 0x0, 0x2}, r3, 0x5, r8, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000851) 13:03:42 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x7fffffff, 0x200, 0x0, 0x2}, 0x14) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x946d, @any, 0x7ff}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2a4040, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='pids.events\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0)={0x712, 0x1ff, 0x38, 0x96e}, 0x14) timerfd_create(0xd, 0xc00) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0xc) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000480)=@ccm_128={{0x304}, "3db1cd5723571765", "69af84c301339d67a7a4d964fbe4ff36", "6237b100", "76613e99558f0b1b"}, 0x28) 13:03:42 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3a76}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff4428}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x406}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5e}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffe01}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020001}, 0x8080) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004001}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.stat\x00', 0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x400000, 0x0) timerfd_settime(r5, 0xe54a4085b409493a, &(0x7f0000000680)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000006c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000740)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x18, 0x0, "8b8e9a4acf05a9d2548892afe2520b0ce3f3a7b2729419421c4f7f30b0b44a7ade5fc381e250d09589926ddb8abb0081ffdb6893472c53323a1fa2c574e02f8c8176e6d49828bd251c7c034b673476e2"}, 0xd8) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000840), 0x2) r8 = openat$cgroup_ro(r5, &(0x7f0000000880)='memory.events.local\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb8, 0x0, 0x410, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r3) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x144, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x40) 13:03:42 executing program 4: getgroups(0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) getgroups(0x7, &(0x7f0000000040)=[0xee00, 0xee00, 0xee01, 0xee00, 0xee01, 0xee00, 0x0]) r6 = getegid() getgroups(0x9, &(0x7f0000000080)=[0xee01, 0x0, 0xffffffffffffffff, r0, 0xee01, r3, r6, 0x0, 0xee01]) getgroups(0x4, &(0x7f00000000c0)=[r8, 0xee00, r6, r5]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x9, &(0x7f0000000100)=0x6, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r10 = getegid() getgroups(0x2, &(0x7f0000000180)=[r1, r2]) getgroups(0x3, &(0x7f00000001c0)=[r4, r10, r11]) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x73}, @void, @val={0xc, 0x99, {0xa7, 0x2a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4a}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r13 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x222001, 0x0) getsockopt$bt_BT_FLUSHABLE(r13, 0x112, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000480)='cdg\x00', 0x4) getgroups(0x3, &(0x7f00000004c0)=[r9, r6, 0xee01]) getgroups(0x1, &(0x7f0000000500)=[r7]) setresgid(r15, r12, r16) openat$cgroup_subtree(r13, &(0x7f0000000540), 0x2, 0x0) 13:03:42 executing program 5: sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x28}}, 0x8800) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30308a0a}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffc7, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x2c}}, 0xc0c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x124b57b}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfa52}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x10000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200408c5) socketpair(0x6, 0x4, 0xffffffff, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f0000000740)={0x1f, 0x52d, @none, 0x1000, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'netpci0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x4, 0x77, 0x7, 0xffff, 0x42, @private1, @mcast1, 0x40, 0x8, 0x9}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0x100, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8050}, 0x8890) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x59}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, r9, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf24, 0xe}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x80}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008870}, 0x8000) 13:03:42 executing program 7: r0 = getegid() r1 = getegid() getgroups(0x9, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) getgroups(0x7, &(0x7f0000000040)=[0x0, 0xee00, r0, 0x0, r1, r4, 0x0]) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @none, 0x7, 0x1}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x101, 0x85, 0x3710, 0x50e5}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) getegid() ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000180)) r9 = semget$private(0x0, 0x2, 0x240) semctl$GETNCNT(r9, 0x2, 0xe, &(0x7f0000000200)=""/221) socketpair(0x15, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000340)=0x69510b4a, &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r12 = syz_io_uring_setup(0x7139, &(0x7f0000000400)={0x0, 0x7df9, 0x2, 0x0, 0x2e4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r12, 0x8000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/86, 0x56, 0x0, &(0x7f0000000580)=""/236, 0xec}, &(0x7f00000006c0)=0x40) getgroups(0x1, &(0x7f0000000700)=[r5]) getgroups(0x4, &(0x7f0000000740)=[r4, r6, 0x0, r0]) getgroups(0xa, &(0x7f0000000780)=[r2, 0xffffffffffffffff, r7, r6, r13, r14, r3, r8, r8, r7]) 13:03:42 executing program 6: socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0x100, "e75e04"}, 0x6) socketpair(0x10, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000180), &(0x7f00000001c0)=0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000088) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/206, 0xce, 0x0, &(0x7f0000000400)=""/147, 0x93}, &(0x7f0000000500)=0x40) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x60}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x63}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4004845) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000008c0)) pselect6(0x40, &(0x7f0000000900)={0x0, 0x6, 0x7, 0x8001, 0x0, 0x80, 0x7, 0x1f}, &(0x7f0000000940)={0x1, 0xb5a, 0x1ff, 0x10000, 0x101, 0x5, 0x100000000, 0xcb5}, &(0x7f0000000980)={0x10000, 0x100000001, 0x3, 0x4, 0x20, 0xa77, 0x54, 0x5}, &(0x7f00000009c0)={0x77359400}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0x4]}, 0x8}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a80), r7) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x1010000, &(0x7f0000000b40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_9p2000}, {@access_user}, {@access_user}, {@afid={'afid', 0x3d, 0xffff}}], [{@smackfshat={'smackfshat', 0x3d, 'wlan1\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x34, 0x35, 0x31, 0x31, 0x65, 0x31, 0x32], 0x2d, [0x37, 0x62, 0x5e, 0x37], 0x2d, [0x64, 0x62, 0x33, 0x35], 0x2d, [0x39, 0x2, 0x38, 0x36], 0x2d, [0x63, 0x63, 0x33, 0x31, 0x65, 0x33, 0x66, 0x34]}}}, {@subj_user={'subj_user', 0x3d, 'wlan1\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '$,'}}]}}) 13:03:42 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = clone3(&(0x7f0000000280)={0x100200000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/93, 0x5d, &(0x7f0000000180)=""/168, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x80, 0x8, 0x3, 0xc1, 0x0, 0xfff, 0x40001, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x4}, 0x40000, 0xff, 0x3, 0x3, 0x6400, 0x1, 0x1, 0x0, 0x3}, r7, 0xf, 0xffffffffffffffff, 0x0) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setns(r8, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x123800, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x810) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r0) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) clone3(&(0x7f0000000b40)={0x1102000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0x8}, &(0x7f00000009c0)=""/32, 0x20, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=[r2, r2, r2, r2, r1, r2, r1, 0x0], 0x8, {r5}}, 0x58) 13:03:42 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x7fffffff, 0x200, 0x0, 0x2}, 0x14) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x946d, @any, 0x7ff}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2a4040, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='pids.events\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0)={0x712, 0x1ff, 0x38, 0x96e}, 0x14) timerfd_create(0xd, 0xc00) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0xc) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000480)=@ccm_128={{0x304}, "3db1cd5723571765", "69af84c301339d67a7a4d964fbe4ff36", "6237b100", "76613e99558f0b1b"}, 0x28) 13:03:43 executing program 7: r0 = getegid() r1 = getegid() getgroups(0x9, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) getgroups(0x7, &(0x7f0000000040)=[0x0, 0xee00, r0, 0x0, r1, r4, 0x0]) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @none, 0x7, 0x1}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x101, 0x85, 0x3710, 0x50e5}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) getegid() ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000180)) r9 = semget$private(0x0, 0x2, 0x240) semctl$GETNCNT(r9, 0x2, 0xe, &(0x7f0000000200)=""/221) socketpair(0x15, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000340)=0x69510b4a, &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r12 = syz_io_uring_setup(0x7139, &(0x7f0000000400)={0x0, 0x7df9, 0x2, 0x0, 0x2e4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r12, 0x8000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/86, 0x56, 0x0, &(0x7f0000000580)=""/236, 0xec}, &(0x7f00000006c0)=0x40) getgroups(0x1, &(0x7f0000000700)=[r5]) getgroups(0x4, &(0x7f0000000740)=[r4, r6, 0x0, r0]) getgroups(0xa, &(0x7f0000000780)=[r2, 0xffffffffffffffff, r7, r6, r13, r14, r3, r8, r8, r7]) 13:03:43 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3a76}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff4428}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x406}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5e}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffe01}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020001}, 0x8080) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004001}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.stat\x00', 0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x400000, 0x0) timerfd_settime(r5, 0xe54a4085b409493a, &(0x7f0000000680)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000006c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000740)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x18, 0x0, "8b8e9a4acf05a9d2548892afe2520b0ce3f3a7b2729419421c4f7f30b0b44a7ade5fc381e250d09589926ddb8abb0081ffdb6893472c53323a1fa2c574e02f8c8176e6d49828bd251c7c034b673476e2"}, 0xd8) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000840), 0x2) r8 = openat$cgroup_ro(r5, &(0x7f0000000880)='memory.events.local\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb8, 0x0, 0x410, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r3) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x144, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x40) 13:03:43 executing program 6: socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0x100, "e75e04"}, 0x6) socketpair(0x10, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000180), &(0x7f00000001c0)=0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000088) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/206, 0xce, 0x0, &(0x7f0000000400)=""/147, 0x93}, &(0x7f0000000500)=0x40) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x60}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x63}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4004845) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000008c0)) pselect6(0x40, &(0x7f0000000900)={0x0, 0x6, 0x7, 0x8001, 0x0, 0x80, 0x7, 0x1f}, &(0x7f0000000940)={0x1, 0xb5a, 0x1ff, 0x10000, 0x101, 0x5, 0x100000000, 0xcb5}, &(0x7f0000000980)={0x10000, 0x100000001, 0x3, 0x4, 0x20, 0xa77, 0x54, 0x5}, &(0x7f00000009c0)={0x77359400}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0x4]}, 0x8}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a80), r7) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x1010000, &(0x7f0000000b40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_9p2000}, {@access_user}, {@access_user}, {@afid={'afid', 0x3d, 0xffff}}], [{@smackfshat={'smackfshat', 0x3d, 'wlan1\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x34, 0x35, 0x31, 0x31, 0x65, 0x31, 0x32], 0x2d, [0x37, 0x62, 0x5e, 0x37], 0x2d, [0x64, 0x62, 0x33, 0x35], 0x2d, [0x39, 0x2, 0x38, 0x36], 0x2d, [0x63, 0x63, 0x33, 0x31, 0x65, 0x33, 0x66, 0x34]}}}, {@subj_user={'subj_user', 0x3d, 'wlan1\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '$,'}}]}}) 13:03:43 executing program 4: getgroups(0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) getgroups(0x7, &(0x7f0000000040)=[0xee00, 0xee00, 0xee01, 0xee00, 0xee01, 0xee00, 0x0]) r6 = getegid() getgroups(0x9, &(0x7f0000000080)=[0xee01, 0x0, 0xffffffffffffffff, r0, 0xee01, r3, r6, 0x0, 0xee01]) getgroups(0x4, &(0x7f00000000c0)=[r8, 0xee00, r6, r5]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x9, &(0x7f0000000100)=0x6, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r10 = getegid() getgroups(0x2, &(0x7f0000000180)=[r1, r2]) getgroups(0x3, &(0x7f00000001c0)=[r4, r10, r11]) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x73}, @void, @val={0xc, 0x99, {0xa7, 0x2a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4a}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r13 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x222001, 0x0) getsockopt$bt_BT_FLUSHABLE(r13, 0x112, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000480)='cdg\x00', 0x4) getgroups(0x3, &(0x7f00000004c0)=[r9, r6, 0xee01]) getgroups(0x1, &(0x7f0000000500)=[r7]) setresgid(r15, r12, r16) openat$cgroup_subtree(r13, &(0x7f0000000540), 0x2, 0x0) 13:03:43 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x7fffffff, 0x200, 0x0, 0x2}, 0x14) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x946d, @any, 0x7ff}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2a4040, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='pids.events\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0)={0x712, 0x1ff, 0x38, 0x96e}, 0x14) timerfd_create(0xd, 0xc00) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0xc) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000480)=@ccm_128={{0x304}, "3db1cd5723571765", "69af84c301339d67a7a4d964fbe4ff36", "6237b100", "76613e99558f0b1b"}, 0x28) 13:03:43 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x1f, "784287"}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8000, 0x50}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3c0fb82a0dcb55632c4e409dc4433af2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6598145d68f8bcdd6cf0551e0914e9ce58d91696387dea7e772ede9ead05df1c"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x400c004) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x214000, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000002c0)={0x7}, 0x2) clone3(&(0x7f0000000580)={0x2000, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0), {0x14}, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000480)=""/131, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x61}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008001}, 0x4005) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040814}, 0x4000084) socketpair(0x11, 0x2, 0x6, &(0x7f0000000800)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r2) r7 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44810}, 0x4090) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x7, 0x4, 0x3, 0x5, 0x0, 0xfffffffffffff26b, 0x1000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x5, 0x10000}, 0x10820, 0x87d, 0x7f, 0x8, 0x3ff, 0x3, 0x4, 0x0, 0x104634cd, 0x0, 0x2}, r3, 0x5, r8, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000851) 13:03:43 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = clone3(&(0x7f0000000280)={0x100200000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/93, 0x5d, &(0x7f0000000180)=""/168, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x80, 0x8, 0x3, 0xc1, 0x0, 0xfff, 0x40001, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x4}, 0x40000, 0xff, 0x3, 0x3, 0x6400, 0x1, 0x1, 0x0, 0x3}, r7, 0xf, 0xffffffffffffffff, 0x0) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setns(r8, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x123800, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x810) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r0) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r0) clone3(&(0x7f0000000b40)={0x1102000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980), {0x8}, &(0x7f00000009c0)=""/32, 0x20, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=[r2, r2, r2, r2, r1, r2, r1, 0x0], 0x8, {r5}}, 0x58) 13:03:43 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x7fffffff, 0x200, 0x0, 0x2}, 0x14) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x946d, @any, 0x7ff}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2a4040, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='pids.events\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0)={0x712, 0x1ff, 0x38, 0x96e}, 0x14) timerfd_create(0xd, 0xc00) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000400), &(0x7f0000000440)=0xc) 13:03:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = clone3(&(0x7f0000000280)={0x100200000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/93, 0x5d, &(0x7f0000000180)=""/168, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x80, 0x8, 0x3, 0xc1, 0x0, 0xfff, 0x40001, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x4}, 0x40000, 0xff, 0x3, 0x3, 0x6400, 0x1, 0x1, 0x0, 0x3}, r7, 0xf, 0xffffffffffffffff, 0x0) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setns(r8, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x123800, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x810) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r0) clone3(&(0x7f0000000b40)={0x1102000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0, {0x8}, &(0x7f00000009c0)=""/32, 0x20, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=[r2, r2, r2, r2, r1, r2, r1, 0x0], 0x8, {r5}}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r11}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:03:56 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x1f, "784287"}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8000, 0x50}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3c0fb82a0dcb55632c4e409dc4433af2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6598145d68f8bcdd6cf0551e0914e9ce58d91696387dea7e772ede9ead05df1c"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x400c004) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x214000, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000002c0)={0x7}, 0x2) clone3(&(0x7f0000000580)={0x2000, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0), {0x14}, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000480)=""/131, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x61}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008001}, 0x4005) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040814}, 0x4000084) socketpair(0x11, 0x2, 0x6, &(0x7f0000000800)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r2) r7 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44810}, 0x4090) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x7, 0x4, 0x3, 0x5, 0x0, 0xfffffffffffff26b, 0x1000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x5, 0x10000}, 0x10820, 0x87d, 0x7f, 0x8, 0x3ff, 0x3, 0x4, 0x0, 0x104634cd, 0x0, 0x2}, r3, 0x5, r8, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000b40)={&(0x7f0000000a40), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x2c, r4, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x8}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000851) 13:03:56 executing program 5: sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x28}}, 0x8800) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30308a0a}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffc7, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x2c}}, 0xc0c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x124b57b}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfa52}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x10000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200408c5) socketpair(0x6, 0x4, 0xffffffff, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f0000000740)={0x1f, 0x52d, @none, 0x1000, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'netpci0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x4, 0x77, 0x7, 0xffff, 0x42, @private1, @mcast1, 0x40, 0x8, 0x9}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0x100, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8050}, 0x8890) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x59}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, r9, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf24, 0xe}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x80}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008870}, 0x8000) 13:03:56 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3a76}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff4428}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x406}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5e}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffe01}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020001}, 0x8080) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004001}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.stat\x00', 0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x400000, 0x0) timerfd_settime(r5, 0xe54a4085b409493a, &(0x7f0000000680)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000006c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000740)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x18, 0x0, "8b8e9a4acf05a9d2548892afe2520b0ce3f3a7b2729419421c4f7f30b0b44a7ade5fc381e250d09589926ddb8abb0081ffdb6893472c53323a1fa2c574e02f8c8176e6d49828bd251c7c034b673476e2"}, 0xd8) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000840), 0x2) r8 = openat$cgroup_ro(r5, &(0x7f0000000880)='memory.events.local\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb8, 0x0, 0x410, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r3) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x144, r9, 0x100, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_ID={0x8}}]}, 0x144}, 0x1, 0x0, 0x0, 0x800}, 0x40) 13:03:56 executing program 4: getgroups(0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) getgroups(0x7, &(0x7f0000000040)=[0xee00, 0xee00, 0xee01, 0xee00, 0xee01, 0xee00, 0x0]) r6 = getegid() getgroups(0x9, &(0x7f0000000080)=[0xee01, 0x0, 0xffffffffffffffff, r0, 0xee01, r3, r6, 0x0, 0xee01]) getgroups(0x4, &(0x7f00000000c0)=[r8, 0xee00, r6, r5]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x9, &(0x7f0000000100)=0x6, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r10 = getegid() getgroups(0x2, &(0x7f0000000180)=[r1, r2]) getgroups(0x3, &(0x7f00000001c0)=[r4, r10, r11]) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x73}, @void, @val={0xc, 0x99, {0xa7, 0x2a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4a}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r13 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x222001, 0x0) getsockopt$bt_BT_FLUSHABLE(r13, 0x112, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r14, 0x6, 0xd, &(0x7f0000000480)='cdg\x00', 0x4) getgroups(0x3, &(0x7f00000004c0)=[r9, r6, 0xee01]) getgroups(0x1, &(0x7f0000000500)=[r7]) setresgid(r15, r12, r16) openat$cgroup_subtree(r13, &(0x7f0000000540), 0x2, 0x0) 13:03:56 executing program 7: r0 = getegid() r1 = getegid() getgroups(0x9, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) getgroups(0x7, &(0x7f0000000040)=[0x0, 0xee00, r0, 0x0, r1, r4, 0x0]) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @none, 0x7, 0x1}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x101, 0x85, 0x3710, 0x50e5}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) getegid() ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000180)) r9 = semget$private(0x0, 0x2, 0x240) semctl$GETNCNT(r9, 0x2, 0xe, &(0x7f0000000200)=""/221) socketpair(0x15, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000340)=0x69510b4a, &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r12 = syz_io_uring_setup(0x7139, &(0x7f0000000400)={0x0, 0x7df9, 0x2, 0x0, 0x2e4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r12, 0x8000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r11, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/86, 0x56, 0x0, &(0x7f0000000580)=""/236, 0xec}, &(0x7f00000006c0)=0x40) getgroups(0x1, &(0x7f0000000700)=[r5]) getgroups(0x4, &(0x7f0000000740)=[r4, r6, 0x0, r0]) getgroups(0xa, &(0x7f0000000780)=[r2, 0xffffffffffffffff, r7, r6, r13, r14, r3, r8, r8, r7]) 13:03:56 executing program 6: socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0x100, "e75e04"}, 0x6) socketpair(0x10, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000180), &(0x7f00000001c0)=0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000088) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/206, 0xce, 0x0, &(0x7f0000000400)=""/147, 0x93}, &(0x7f0000000500)=0x40) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x60}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x63}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4004845) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000008c0)) pselect6(0x40, &(0x7f0000000900)={0x0, 0x6, 0x7, 0x8001, 0x0, 0x80, 0x7, 0x1f}, &(0x7f0000000940)={0x1, 0xb5a, 0x1ff, 0x10000, 0x101, 0x5, 0x100000000, 0xcb5}, &(0x7f0000000980)={0x10000, 0x100000001, 0x3, 0x4, 0x20, 0xa77, 0x54, 0x5}, &(0x7f00000009c0)={0x77359400}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0x4]}, 0x8}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a80), r7) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x1010000, &(0x7f0000000b40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_9p2000}, {@access_user}, {@access_user}, {@afid={'afid', 0x3d, 0xffff}}], [{@smackfshat={'smackfshat', 0x3d, 'wlan1\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x34, 0x35, 0x31, 0x31, 0x65, 0x31, 0x32], 0x2d, [0x37, 0x62, 0x5e, 0x37], 0x2d, [0x64, 0x62, 0x33, 0x35], 0x2d, [0x39, 0x2, 0x38, 0x36], 0x2d, [0x63, 0x63, 0x33, 0x31, 0x65, 0x33, 0x66, 0x34]}}}, {@subj_user={'subj_user', 0x3d, 'wlan1\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '$,'}}]}}) 13:03:56 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x7fffffff, 0x200, 0x0, 0x2}, 0x14) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x946d, @any, 0x7ff}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2a4040, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='pids.events\x00', 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000003c0)={0x712, 0x1ff, 0x38, 0x96e}, 0x14) timerfd_create(0xd, 0xc00) 13:03:56 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x7fffffff, 0x200, 0x0, 0x2}, 0x14) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x946d, @any, 0x7ff}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2a4040, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='pids.events\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) timerfd_create(0xd, 0xc00) 13:03:56 executing program 7: r0 = getegid() r1 = getegid() getgroups(0x9, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) getgroups(0x7, &(0x7f0000000040)=[0x0, 0xee00, r0, 0x0, r1, r2, 0x0]) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @none, 0x7, 0x1}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x101, 0x85, 0x3710, 0x50e5}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) getegid() ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000180)) r5 = semget$private(0x0, 0x2, 0x240) semctl$GETNCNT(r5, 0x2, 0xe, &(0x7f0000000200)=""/221) socketpair(0x15, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000340)=0x69510b4a, &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r8 = syz_io_uring_setup(0x7139, &(0x7f0000000400)={0x0, 0x7df9, 0x2, 0x0, 0x2e4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r8, 0x8000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/86, 0x56, 0x0, &(0x7f0000000580)=""/236, 0xec}, &(0x7f00000006c0)=0x40) getgroups(0x1, &(0x7f0000000700)=[r3]) getgroups(0x4, &(0x7f0000000740)=[r2, r4, 0x0, r0]) 13:03:56 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x7fffffff, 0x200, 0x0, 0x2}, 0x14) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x946d, @any, 0x7ff}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2a4040, 0x0) openat$cgroup_ro(r0, &(0x7f0000000380)='pids.events\x00', 0x0, 0x0) timerfd_create(0xd, 0xc00) 13:03:56 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x1f, "784287"}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8000, 0x50}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3c0fb82a0dcb55632c4e409dc4433af2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6598145d68f8bcdd6cf0551e0914e9ce58d91696387dea7e772ede9ead05df1c"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x400c004) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x214000, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000002c0)={0x7}, 0x2) clone3(&(0x7f0000000580)={0x2000, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0), {0x14}, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000480)=""/131, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x61}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008001}, 0x4005) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040814}, 0x4000084) socketpair(0x11, 0x2, 0x6, &(0x7f0000000800)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r2) r7 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44810}, 0x4090) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) perf_event_open(&(0x7f0000000980)={0x2, 0x80, 0x7, 0x4, 0x3, 0x5, 0x0, 0xfffffffffffff26b, 0x1000, 0x8, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7fff, 0x0, @perf_config_ext={0x5, 0x10000}, 0x10820, 0x87d, 0x7f, 0x8, 0x3ff, 0x3, 0x4, 0x0, 0x104634cd, 0x0, 0x2}, r3, 0x5, r8, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan0\x00'}) 13:03:56 executing program 6: socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0x100, "e75e04"}, 0x6) socketpair(0x10, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000180), &(0x7f00000001c0)=0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000088) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/206, 0xce, 0x0, &(0x7f0000000400)=""/147, 0x93}, &(0x7f0000000500)=0x40) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x60}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x63}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4004845) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000008c0)) pselect6(0x40, &(0x7f0000000900)={0x0, 0x6, 0x7, 0x8001, 0x0, 0x80, 0x7, 0x1f}, &(0x7f0000000940)={0x1, 0xb5a, 0x1ff, 0x10000, 0x101, 0x5, 0x100000000, 0xcb5}, &(0x7f0000000980)={0x10000, 0x100000001, 0x3, 0x4, 0x20, 0xa77, 0x54, 0x5}, &(0x7f00000009c0)={0x77359400}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0x4]}, 0x8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x1010000, &(0x7f0000000b40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_9p2000}, {@access_user}, {@access_user}, {@afid={'afid', 0x3d, 0xffff}}], [{@smackfshat={'smackfshat', 0x3d, 'wlan1\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x34, 0x35, 0x31, 0x31, 0x65, 0x31, 0x32], 0x2d, [0x37, 0x62, 0x5e, 0x37], 0x2d, [0x64, 0x62, 0x33, 0x35], 0x2d, [0x39, 0x2, 0x38, 0x36], 0x2d, [0x63, 0x63, 0x33, 0x31, 0x65, 0x33, 0x66, 0x34]}}}, {@subj_user={'subj_user', 0x3d, 'wlan1\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '$,'}}]}}) 13:03:56 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = clone3(&(0x7f0000000280)={0x100200000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/93, 0x5d, &(0x7f0000000180)=""/168, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x80, 0x8, 0x3, 0xc1, 0x0, 0xfff, 0x40001, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x4}, 0x40000, 0xff, 0x3, 0x3, 0x6400, 0x1, 0x1, 0x0, 0x3}, r7, 0xf, 0xffffffffffffffff, 0x0) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setns(r8, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x123800, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x810) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r0) clone3(&(0x7f0000000b40)={0x1102000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0, {0x8}, &(0x7f00000009c0)=""/32, 0x20, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=[r2, r2, r2, r2, r1, r2, r1, 0x0], 0x8, {r5}}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r11}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:03:56 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x7fffffff, 0x200, 0x0, 0x2}, 0x14) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x946d, @any, 0x7ff}, 0xe) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x2a4040, 0x0) timerfd_create(0xd, 0xc00) 13:03:56 executing program 4: getgroups(0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) getgroups(0x7, &(0x7f0000000040)=[0xee00, 0xee00, 0xee01, 0xee00, 0xee01, 0xee00, 0x0]) r6 = getegid() getgroups(0x9, &(0x7f0000000080)=[0xee01, 0x0, 0xffffffffffffffff, r0, 0xee01, r3, r6, 0x0, 0xee01]) getgroups(0x4, &(0x7f00000000c0)=[r8, 0xee00, r6, r5]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x9, &(0x7f0000000100)=0x6, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r10 = getegid() getgroups(0x2, &(0x7f0000000180)=[r1, r2]) getgroups(0x3, &(0x7f00000001c0)=[r4, r10, r11]) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x73}, @void, @val={0xc, 0x99, {0xa7, 0x2a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4a}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r12 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x222001, 0x0) getsockopt$bt_BT_FLUSHABLE(r12, 0x112, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r13, 0x6, 0xd, &(0x7f0000000480)='cdg\x00', 0x4) getgroups(0x3, &(0x7f00000004c0)=[r9, r6, 0xee01]) getgroups(0x1, &(0x7f0000000500)=[r7]) openat$cgroup_subtree(r12, &(0x7f0000000540), 0x2, 0x0) 13:04:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = clone3(&(0x7f0000000280)={0x100200000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/93, 0x5d, &(0x7f0000000180)=""/168, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x80, 0x8, 0x3, 0xc1, 0x0, 0xfff, 0x40001, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x4}, 0x40000, 0xff, 0x3, 0x3, 0x6400, 0x1, 0x1, 0x0, 0x3}, r7, 0xf, 0xffffffffffffffff, 0x0) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setns(r8, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x123800, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x810) clone3(&(0x7f0000000b40)={0x1102000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0, {0x8}, &(0x7f00000009c0)=""/32, 0x20, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=[r2, r2, r2, r2, r1, r2, r1, 0x0], 0x8, {r5}}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r11}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:04:12 executing program 5: sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x28}}, 0x8800) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30308a0a}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffc7, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x2c}}, 0xc0c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x124b57b}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfa52}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x10000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200408c5) socketpair(0x6, 0x4, 0xffffffff, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f0000000740)={0x1f, 0x52d, @none, 0x1000, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'netpci0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x4, 0x77, 0x7, 0xffff, 0x42, @private1, @mcast1, 0x40, 0x8, 0x9}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0x100, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8050}, 0x8890) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x59}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r0, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x68, r9, 0x800, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xf24, 0xe}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x80}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_MAC={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008870}, 0x8000) 13:04:12 executing program 4: getgroups(0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) getgroups(0x7, &(0x7f0000000040)=[0xee00, 0xee00, 0xee01, 0xee00, 0xee01, 0xee00, 0x0]) r6 = getegid() getgroups(0x9, &(0x7f0000000080)=[0xee01, 0x0, 0xffffffffffffffff, r0, 0xee01, r3, r6, 0x0, 0xee01]) getgroups(0x4, &(0x7f00000000c0)=[r7, 0xee00, r6, r5]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x9, &(0x7f0000000100)=0x6, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r9 = getegid() getgroups(0x2, &(0x7f0000000180)=[r1, r2]) getgroups(0x3, &(0x7f00000001c0)=[r4, r9, r10]) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x73}, @void, @val={0xc, 0x99, {0xa7, 0x2a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4a}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x222001, 0x0) getsockopt$bt_BT_FLUSHABLE(r11, 0x112, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r12, 0x6, 0xd, &(0x7f0000000480)='cdg\x00', 0x4) getgroups(0x3, &(0x7f00000004c0)=[r8, r6, 0xee01]) openat$cgroup_subtree(r11, &(0x7f0000000540), 0x2, 0x0) 13:04:12 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x7fffffff, 0x200, 0x0, 0x2}, 0x14) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000300)={0x1f, 0x946d, @any, 0x7ff}, 0xe) timerfd_create(0xd, 0xc00) 13:04:12 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3a76}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff4428}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x406}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5e}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffe01}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020001}, 0x8080) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004001}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.stat\x00', 0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x400000, 0x0) timerfd_settime(r5, 0xe54a4085b409493a, &(0x7f0000000680)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000006c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000740)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x18, 0x0, "8b8e9a4acf05a9d2548892afe2520b0ce3f3a7b2729419421c4f7f30b0b44a7ade5fc381e250d09589926ddb8abb0081ffdb6893472c53323a1fa2c574e02f8c8176e6d49828bd251c7c034b673476e2"}, 0xd8) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000840), 0x2) r8 = openat$cgroup_ro(r5, &(0x7f0000000880)='memory.events.local\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r8, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xb8, 0x0, 0x410, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r3) 13:04:12 executing program 6: socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0x100, "e75e04"}, 0x6) socketpair(0x10, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000180), &(0x7f00000001c0)=0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000088) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/206, 0xce, 0x0, &(0x7f0000000400)=""/147, 0x93}, &(0x7f0000000500)=0x40) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x60}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x63}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4004845) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000008c0)) pselect6(0x40, &(0x7f0000000900)={0x0, 0x6, 0x7, 0x8001, 0x0, 0x80, 0x7, 0x1f}, &(0x7f0000000940)={0x1, 0xb5a, 0x1ff, 0x10000, 0x101, 0x5, 0x100000000, 0xcb5}, &(0x7f0000000980)={0x10000, 0x100000001, 0x3, 0x4, 0x20, 0xa77, 0x54, 0x5}, &(0x7f00000009c0)={0x77359400}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0x4]}, 0x8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x1010000, &(0x7f0000000b40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_9p2000}, {@access_user}, {@access_user}, {@afid={'afid', 0x3d, 0xffff}}], [{@smackfshat={'smackfshat', 0x3d, 'wlan1\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x34, 0x35, 0x31, 0x31, 0x65, 0x31, 0x32], 0x2d, [0x37, 0x62, 0x5e, 0x37], 0x2d, [0x64, 0x62, 0x33, 0x35], 0x2d, [0x39, 0x2, 0x38, 0x36], 0x2d, [0x63, 0x63, 0x33, 0x31, 0x65, 0x33, 0x66, 0x34]}}}, {@subj_user={'subj_user', 0x3d, 'wlan1\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '$,'}}]}}) 13:04:12 executing program 7: r0 = getegid() r1 = getegid() getgroups(0x9, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) getgroups(0x7, &(0x7f0000000040)=[0x0, 0xee00, r0, 0x0, r1, r2, 0x0]) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @none, 0x7, 0x1}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x101, 0x85, 0x3710, 0x50e5}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) getegid() ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000180)) r4 = semget$private(0x0, 0x2, 0x240) semctl$GETNCNT(r4, 0x2, 0xe, &(0x7f0000000200)=""/221) socketpair(0x15, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000340)=0x69510b4a, &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r7 = syz_io_uring_setup(0x7139, &(0x7f0000000400)={0x0, 0x7df9, 0x2, 0x0, 0x2e4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r7, 0x8000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/86, 0x56, 0x0, &(0x7f0000000580)=""/236, 0xec}, &(0x7f00000006c0)=0x40) getgroups(0x1, &(0x7f0000000700)=[r3]) 13:04:12 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x1f, "784287"}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8000, 0x50}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3c0fb82a0dcb55632c4e409dc4433af2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6598145d68f8bcdd6cf0551e0914e9ce58d91696387dea7e772ede9ead05df1c"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x400c004) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x214000, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000002c0)={0x7}, 0x2) clone3(&(0x7f0000000580)={0x2000, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0), {0x14}, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000480)=""/131, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x61}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008001}, 0x4005) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040814}, 0x4000084) socketpair(0x11, 0x2, 0x6, &(0x7f0000000800)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r2) r7 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44810}, 0x4090) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000a00), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000a80)={'wlan0\x00'}) 13:04:12 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x7fffffff, 0x200, 0x0, 0x2}, 0x14) timerfd_create(0xd, 0xc00) 13:04:12 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3a76}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff4428}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x406}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5e}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffe01}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020001}, 0x8080) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004001}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.stat\x00', 0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x400000, 0x0) timerfd_settime(r5, 0xe54a4085b409493a, &(0x7f0000000680)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000006c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000740)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x18, 0x0, "8b8e9a4acf05a9d2548892afe2520b0ce3f3a7b2729419421c4f7f30b0b44a7ade5fc381e250d09589926ddb8abb0081ffdb6893472c53323a1fa2c574e02f8c8176e6d49828bd251c7c034b673476e2"}, 0xd8) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000840), 0x2) openat$cgroup_ro(r5, &(0x7f0000000880)='memory.events.local\x00', 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r3) 13:04:12 executing program 6: socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0x100, "e75e04"}, 0x6) socketpair(0x10, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000180), &(0x7f00000001c0)=0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000088) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/206, 0xce, 0x0, &(0x7f0000000400)=""/147, 0x93}, &(0x7f0000000500)=0x40) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x60}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x63}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4004845) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000008c0)) pselect6(0x40, &(0x7f0000000900)={0x0, 0x6, 0x7, 0x8001, 0x0, 0x80, 0x7, 0x1f}, &(0x7f0000000940)={0x1, 0xb5a, 0x1ff, 0x10000, 0x101, 0x5, 0x100000000, 0xcb5}, &(0x7f0000000980)={0x10000, 0x100000001, 0x3, 0x4, 0x20, 0xa77, 0x54, 0x5}, &(0x7f00000009c0)={0x77359400}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0x4]}, 0x8}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x1010000, &(0x7f0000000b40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_9p2000}, {@access_user}, {@access_user}, {@afid={'afid', 0x3d, 0xffff}}], [{@smackfshat={'smackfshat', 0x3d, 'wlan1\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x34, 0x35, 0x31, 0x31, 0x65, 0x31, 0x32], 0x2d, [0x37, 0x62, 0x5e, 0x37], 0x2d, [0x64, 0x62, 0x33, 0x35], 0x2d, [0x39, 0x2, 0x38, 0x36], 0x2d, [0x63, 0x63, 0x33, 0x31, 0x65, 0x33, 0x66, 0x34]}}}, {@subj_user={'subj_user', 0x3d, 'wlan1\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '$,'}}]}}) 13:04:12 executing program 7: r0 = getegid() r1 = getegid() getgroups(0x9, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) getgroups(0x7, &(0x7f0000000040)=[0x0, 0xee00, r0, 0x0, r1, r2, 0x0]) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @none, 0x7, 0x1}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x101, 0x85, 0x3710, 0x50e5}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) getegid() ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000180)) r3 = semget$private(0x0, 0x2, 0x240) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000200)=""/221) socketpair(0x15, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000340)=0x69510b4a, &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r6 = syz_io_uring_setup(0x7139, &(0x7f0000000400)={0x0, 0x7df9, 0x2, 0x0, 0x2e4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r6, 0x8000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000680)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/86, 0x56, 0x0, &(0x7f0000000580)=""/236, 0xec}, &(0x7f00000006c0)=0x40) 13:04:12 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = clone3(&(0x7f0000000280)={0x100200000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/93, 0x5d, &(0x7f0000000180)=""/168, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x80, 0x8, 0x3, 0xc1, 0x0, 0xfff, 0x40001, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x4}, 0x40000, 0xff, 0x3, 0x3, 0x6400, 0x1, 0x1, 0x0, 0x3}, r7, 0xf, 0xffffffffffffffff, 0x0) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setns(r8, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x123800, 0x0) r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6) sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x58, r10, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x3f}, @SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfff}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x810) clone3(&(0x7f0000000b40)={0x1102000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0, {0x8}, &(0x7f00000009c0)=""/32, 0x20, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=[r2, r2, r2, r2, r1, r2, r1, 0x0], 0x8, {r5}}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r11}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:04:27 executing program 4: getgroups(0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) getgroups(0x7, &(0x7f0000000040)=[0xee00, 0xee00, 0xee01, 0xee00, 0xee01, 0xee00, 0x0]) r6 = getegid() getgroups(0x9, &(0x7f0000000080)=[0xee01, 0x0, 0xffffffffffffffff, r0, 0xee01, r3, r6, 0x0, 0xee01]) getgroups(0x4, &(0x7f00000000c0)=[r7, 0xee00, r6, r5]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x9, &(0x7f0000000100)=0x6, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r8 = getegid() getgroups(0x2, &(0x7f0000000180)=[r1, r2]) getgroups(0x3, &(0x7f00000001c0)=[r4, r8, r9]) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x73}, @void, @val={0xc, 0x99, {0xa7, 0x2a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4a}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x222001, 0x0) getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f0000000480)='cdg\x00', 0x4) openat$cgroup_subtree(r10, &(0x7f0000000540), 0x2, 0x0) 13:04:27 executing program 5: sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x8}]}, 0x28}}, 0x8800) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x30308a0a}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xffffffc7, 0x7}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x54}]}, 0x2c}}, 0xc0c0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x124b57b}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xfa52}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x0, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x2c}, 0x1, 0x0, 0x0, 0xd0}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r1, 0x10, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x10000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000600), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x38, r4, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x200408c5) socketpair(0x6, 0x4, 0xffffffff, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_l2cap(r5, &(0x7f0000000740)={0x1f, 0x52d, @none, 0x1000, 0x1}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000007c0)={'netpci0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'veth1_virt_wifi\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r5, 0x89f5, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x4, 0x77, 0x7, 0xffff, 0x42, @private1, @mcast1, 0x40, 0x8, 0x9}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000a40)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000900)={0x100, r4, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x8050}, 0x8890) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x59}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x80) syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r3) 13:04:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = clone3(&(0x7f0000000280)={0x100200000, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f00000000c0), {0x1d}, &(0x7f0000000100)=""/93, 0x5d, &(0x7f0000000180)=""/168, &(0x7f0000000240)=[0x0, 0x0], 0x2}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000c5}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x3c, r4, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000540)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000580)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) perf_event_open$cgroup(&(0x7f0000000600)={0x1, 0x80, 0x80, 0x8, 0x3, 0xc1, 0x0, 0xfff, 0x40001, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x7, 0x4, @perf_config_ext={0x2, 0x4}, 0x40000, 0xff, 0x3, 0x3, 0x6400, 0x1, 0x1, 0x0, 0x3}, r7, 0xf, 0xffffffffffffffff, 0x0) r8 = ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) setns(r8, 0x0) r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680), 0x123800, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000700), r6) clone3(&(0x7f0000000b40)={0x1102000, &(0x7f0000000900), &(0x7f0000000940), &(0x7f0000000980)=0x0, {0x8}, &(0x7f00000009c0)=""/32, 0x20, &(0x7f0000000a00)=""/233, &(0x7f0000000b00)=[r2, r2, r2, r2, r1, r2, r1, 0x0], 0x8, {r5}}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000c80)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x4c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r9}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r10}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_PID={0x8, 0x1c, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 13:04:27 executing program 1: r0 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)={0x2, 0x0, @d}, 0x18, 0xfffffffffffffff8) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3a76}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xe0}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8000}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffffffff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7ff}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x81}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xffff4428}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x406}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5e}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x80}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffe01}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xc}]}, 0x130}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4020001}, 0x8080) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, 0xfffffffffffffff9, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x60}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}]}, 0x34}, 0x1, 0x0, 0x0, 0x24004001}, 0x14) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000540)='cpuacct.stat\x00', 0x0, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000000580)={{0x77359400}, {0x77359400}}, &(0x7f00000005c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r4) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640), 0x400000, 0x0) timerfd_settime(r5, 0xe54a4085b409493a, &(0x7f0000000680)={{0x0, 0x3938700}, {0x0, 0x3938700}}, &(0x7f00000006c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000740)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x18, 0x0, "8b8e9a4acf05a9d2548892afe2520b0ce3f3a7b2729419421c4f7f30b0b44a7ade5fc381e250d09589926ddb8abb0081ffdb6893472c53323a1fa2c574e02f8c8176e6d49828bd251c7c034b673476e2"}, 0xd8) getsockopt$bt_BT_SECURITY(r6, 0x112, 0x4, &(0x7f0000000840), 0x2) syz_genetlink_get_family_id$devlink(&(0x7f0000000a80), r3) 13:04:27 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000280)) timerfd_create(0xd, 0xc00) 13:04:27 executing program 2: openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x109000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0x1f, "784287"}, 0x6) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000080)=0x1, 0x1) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x8000, 0x50}}}}, [@NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3c0fb82a0dcb55632c4e409dc4433af2"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6598145d68f8bcdd6cf0551e0914e9ce58d91696387dea7e772ede9ead05df1c"}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x400c004) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x214000, 0x0) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000002c0)={0x7}, 0x2) clone3(&(0x7f0000000580)={0x2000, &(0x7f0000000340), &(0x7f0000000380)=0x0, &(0x7f00000003c0), {0x14}, &(0x7f0000000400)=""/72, 0x48, &(0x7f0000000480)=""/131, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff], 0x4, {r2}}, 0x58) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r0, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x61}, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x3b}, @NL80211_ATTR_PID={0x8, 0x52, r3}]}, 0x34}, 0x1, 0x0, 0x0, 0x24008001}, 0x4005) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r2) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r4, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040814}, 0x4000084) socketpair(0x11, 0x2, 0x6, &(0x7f0000000800)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), r2) r7 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000940)={&(0x7f0000000840), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x3c, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44810}, 0x4090) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wlan0\x00'}) 13:04:27 executing program 6: socketpair(0x27, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000080)={0x100, "e75e04"}, 0x6) socketpair(0x10, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000180), &(0x7f00000001c0)=0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, 0x0, 0x4, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20000088) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000004c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/206, 0xce, 0x0, &(0x7f0000000400)=""/147, 0x93}, &(0x7f0000000500)=0x40) r4 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r5 = ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x8000, 0x60}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x63}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x79}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x30, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x4004845) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x1c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x46}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f00000008c0)) pselect6(0x40, &(0x7f0000000900)={0x0, 0x6, 0x7, 0x8001, 0x0, 0x80, 0x7, 0x1f}, &(0x7f0000000940)={0x1, 0xb5a, 0x1ff, 0x10000, 0x101, 0x5, 0x100000000, 0xcb5}, &(0x7f0000000980)={0x10000, 0x100000001, 0x3, 0x4, 0x20, 0xa77, 0x54, 0x5}, &(0x7f00000009c0)={0x77359400}, &(0x7f0000000a40)={&(0x7f0000000a00)={[0x4]}, 0x8}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000a80), 0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00), 0x1010000, &(0x7f0000000b40)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L}, {@version_u}, {@version_9p2000}, {@access_user}, {@access_user}, {@afid={'afid', 0x3d, 0xffff}}], [{@smackfshat={'smackfshat', 0x3d, 'wlan1\x00'}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x34, 0x35, 0x31, 0x31, 0x65, 0x31, 0x32], 0x2d, [0x37, 0x62, 0x5e, 0x37], 0x2d, [0x64, 0x62, 0x33, 0x35], 0x2d, [0x39, 0x2, 0x38, 0x36], 0x2d, [0x63, 0x63, 0x33, 0x31, 0x65, 0x33, 0x66, 0x34]}}}, {@subj_user={'subj_user', 0x3d, 'wlan1\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, '$,'}}]}}) 13:04:27 executing program 7: r0 = getegid() r1 = getegid() getgroups(0x9, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) getgroups(0x7, &(0x7f0000000040)=[0x0, 0xee00, r0, 0x0, r1, r2, 0x0]) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @none, 0x7, 0x1}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x101, 0x85, 0x3710, 0x50e5}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) getegid() ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000180)) r3 = semget$private(0x0, 0x2, 0x240) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000200)=""/221) socketpair(0x15, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000340)=0x69510b4a, &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) r5 = syz_io_uring_setup(0x7139, &(0x7f0000000400)={0x0, 0x7df9, 0x2, 0x0, 0x2e4}, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000480), &(0x7f00000004c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, r5, 0x8000000) 13:04:27 executing program 4: getgroups(0x4, &(0x7f0000000000)=[0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff]) getgroups(0x7, &(0x7f0000000040)=[0xee00, 0xee00, 0xee01, 0xee00, 0xee01, 0xee00, 0x0]) r6 = getegid() getgroups(0x9, &(0x7f0000000080)=[0xee01, 0x0, 0xffffffffffffffff, r0, 0xee01, r3, r6, 0x0, 0xee01]) getgroups(0x4, &(0x7f00000000c0)=[r7, 0xee00, r6, r5]) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x9, &(0x7f0000000100)=0x6, 0x4) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x3) r8 = getegid() getgroups(0x2, &(0x7f0000000180)=[r1, r2]) getgroups(0x3, &(0x7f00000001c0)=[r4, r8, r9]) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x73}, @void, @val={0xc, 0x99, {0xa7, 0x2a}}}}, [@NL80211_ATTR_PID={0x8, 0x52, 0xffffffffffffffff}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x39}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4a}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r10 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0), 0x222001, 0x0) getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000400), &(0x7f0000000440)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_subtree(r10, &(0x7f0000000540), 0x2, 0x0) 13:04:27 executing program 7: r0 = getegid() r1 = getegid() getgroups(0x9, &(0x7f0000000000)=[0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0xffffffffffffffff, 0x0, 0xee01, 0xffffffffffffffff, 0xee01]) getgroups(0x7, &(0x7f0000000040)=[0x0, 0xee00, r0, 0x0, r1, r2, 0x0]) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x7, @none, 0x7, 0x1}, 0xe) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000000c0)={0x2, 0x101, 0x85, 0x3710, 0x50e5}, 0x14) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) getegid() ioctl$SNDRV_TIMER_IOCTL_STATUS32(0xffffffffffffffff, 0x80585414, &(0x7f0000000180)) r3 = semget$private(0x0, 0x2, 0x240) semctl$GETNCNT(r3, 0x2, 0xe, &(0x7f0000000200)=""/221) socketpair(0x15, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000340)=0x69510b4a, &(0x7f0000000380)=0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00'}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000000, 0x1010, 0xffffffffffffffff, 0x8000000) 13:04:27 executing program 0: write$selinux_attr(0xffffffffffffffff, &(0x7f0000000000)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) sched_rr_get_interval(0x0, &(0x7f0000000100)) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x1000, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) socket$inet6_tcp(0xa, 0x1, 0x0) timerfd_create(0xd, 0xc00) [ 178.640285] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 178.641458] Not tainted 6.0.0-rc7-next-20220929 #1 [ 178.642872] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 178.644130] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 178.646121] Call Trace: [ 178.646898] [ 178.647253] __schedule+0x893/0x2470 [ 178.647803] ? io_schedule_timeout+0x150/0x150 [ 178.648465] ? do_raw_spin_lock+0x121/0x260 [ 178.649075] ? rwlock_bug.part.0+0x90/0x90 [ 178.649716] schedule+0xda/0x1b0 [ 178.650237] rescuer_thread+0x851/0xdb0 [ 178.650801] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 178.651532] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 178.652261] ? lockdep_hardirqs_on+0x79/0x100 [ 178.652896] ? worker_thread+0x1260/0x1260 [ 178.653525] kthread+0x2ed/0x3a0 [ 178.654033] ? kthread_complete_and_exit+0x40/0x40 [ 178.654750] ret_from_fork+0x22/0x30 [ 178.655346] [ 178.655691] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 178.656637] Not tainted 6.0.0-rc7-next-20220929 #1 [ 178.657415] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 178.658526] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 178.659744] Call Trace: [ 178.660111] [ 178.660465] __schedule+0x893/0x2470 [ 178.661001] ? io_schedule_timeout+0x150/0x150 [ 178.661652] ? do_raw_spin_lock+0x121/0x260 [ 178.662303] ? rwlock_bug.part.0+0x90/0x90 [ 178.662893] schedule+0xda/0x1b0 [ 178.663401] rescuer_thread+0x851/0xdb0 [ 178.663960] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 178.664669] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 178.665384] ? lockdep_hardirqs_on+0x79/0x100 [ 178.666015] ? worker_thread+0x1260/0x1260 [ 178.666631] kthread+0x2ed/0x3a0 [ 178.667105] ? kthread_complete_and_exit+0x40/0x40 [ 178.667814] ret_from_fork+0x22/0x30 [ 178.668378] [ 178.668705] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 178.669612] Not tainted 6.0.0-rc7-next-20220929 #1 [ 178.670352] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 178.671412] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 178.672540] Call Trace: [ 178.672891] [ 178.673245] __schedule+0x893/0x2470 [ 178.673774] ? io_schedule_timeout+0x150/0x150 [ 178.674447] ? do_raw_spin_lock+0x121/0x260 [ 178.675040] ? rwlock_bug.part.0+0x90/0x90 [ 178.675669] schedule+0xda/0x1b0 [ 178.676154] rescuer_thread+0x851/0xdb0 [ 178.676741] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 178.677463] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 178.678158] ? lockdep_hardirqs_on+0x79/0x100 [ 178.678813] ? worker_thread+0x1260/0x1260 [ 178.679430] kthread+0x2ed/0x3a0 [ 178.679904] ? kthread_complete_and_exit+0x40/0x40 [ 178.680611] ret_from_fork+0x22/0x30 [ 178.681152] [ 178.681507] INFO: task netns:6 blocked for more than 143 seconds. [ 178.682361] Not tainted 6.0.0-rc7-next-20220929 #1 [ 178.683073] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 178.684106] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 178.685231] Call Trace: [ 178.685586] [ 178.685918] __schedule+0x893/0x2470 [ 178.686489] ? io_schedule_timeout+0x150/0x150 [ 178.687128] ? do_raw_spin_lock+0x121/0x260 [ 178.687755] ? rwlock_bug.part.0+0x90/0x90 [ 178.688384] schedule+0xda/0x1b0 [ 178.688865] rescuer_thread+0x851/0xdb0 [ 178.689455] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 178.690148] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 178.690866] ? lockdep_hardirqs_on+0x79/0x100 [ 178.691533] ? worker_thread+0x1260/0x1260 [ 178.692120] kthread+0x2ed/0x3a0 [ 178.692669] ? kthread_complete_and_exit+0x40/0x40 [ 178.693383] ret_from_fork+0x22/0x30 [ 178.693947] [ 178.694320] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 178.695236] Not tainted 6.0.0-rc7-next-20220929 #1 [ 178.695973] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 178.697025] task:kworker/0:0 state:I stack:29592 pid:7 ppid:2 flags:0x00004000 [ 178.698211] Workqueue: 0x0 (rcu_gp) [ 178.698743] Call Trace: [ 178.699096] [ 178.699468] __schedule+0x893/0x2470 [ 178.700002] ? io_schedule_timeout+0x150/0x150 [ 178.700685] schedule+0xda/0x1b0 [ 178.701168] worker_thread+0x15f/0x1260 [ 178.701787] ? process_one_work+0x16a0/0x16a0 [ 178.702468] kthread+0x2ed/0x3a0 [ 178.702957] ? kthread_complete_and_exit+0x40/0x40 [ 178.703683] ret_from_fork+0x22/0x30 [ 178.704256] [ 178.704593] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 178.705527] Not tainted 6.0.0-rc7-next-20220929 #1 [ 178.706409] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 178.707433] task:kworker/0:0H state:I stack:29048 pid:8 ppid:2 flags:0x00004000 [ 178.708553] Workqueue: 0x0 (kblockd) [ 178.709070] Call Trace: [ 178.709456] [ 178.709771] __schedule+0x893/0x2470 [ 178.710337] ? io_schedule_timeout+0x150/0x150 [ 178.710974] schedule+0xda/0x1b0 [ 178.711470] worker_thread+0x15f/0x1260 [ 178.712035] ? process_one_work+0x16a0/0x16a0 [ 178.712706] kthread+0x2ed/0x3a0 [ 178.713216] ? kthread_complete_and_exit+0x40/0x40 [ 178.713886] ret_from_fork+0x22/0x30 [ 178.714462] [ 178.714783] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 178.715691] Not tainted 6.0.0-rc7-next-20220929 #1 [ 178.716416] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 178.717443] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 178.718600] Call Trace: [ 178.718946] [ 178.719296] __schedule+0x893/0x2470 [ 178.719825] ? io_schedule_timeout+0x150/0x150 [ 178.720481] ? do_raw_spin_lock+0x121/0x260 [ 178.721079] ? rwlock_bug.part.0+0x90/0x90 [ 178.721697] schedule+0xda/0x1b0 [ 178.722175] rescuer_thread+0x851/0xdb0 [ 178.722758] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 178.723471] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 178.724140] ? lockdep_hardirqs_on+0x79/0x100 [ 178.724792] ? worker_thread+0x1260/0x1260 [ 178.725416] kthread+0x2ed/0x3a0 [ 178.725908] ? kthread_complete_and_exit+0x40/0x40 [ 178.726616] ret_from_fork+0x22/0x30 [ 178.727146] [ 178.727499] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 178.728457] Not tainted 6.0.0-rc7-next-20220929 #1 [ 178.729165] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 178.730220] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 178.731363] Call Trace: [ 178.731716] [ 178.732036] __schedule+0x893/0x2470 [ 178.732602] ? io_schedule_timeout+0x150/0x150 [ 178.733255] ? mark_held_locks+0x9e/0xe0 [ 178.733817] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 178.734576] schedule+0xda/0x1b0 [ 178.735051] rcu_tasks_one_gp+0x3db/0xc10 [ 178.735678] rcu_tasks_kthread+0x80/0xa0 [ 178.736273] ? rcu_tasks_postscan+0x10/0x10 [ 178.736860] kthread+0x2ed/0x3a0 [ 178.737368] ? kthread_complete_and_exit+0x40/0x40 [ 178.738048] ret_from_fork+0x22/0x30 [ 178.738625] [ 178.738954] INFO: task kworker/1:0:20 blocked for more than 143 seconds. [ 178.739869] Not tainted 6.0.0-rc7-next-20220929 #1 [ 178.740606] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 178.741652] task:kworker/1:0 state:I stack:29760 pid:20 ppid:2 flags:0x00004000 [ 178.742798] Workqueue: 0x0 (ata_sff) [ 178.743352] Call Trace: [ 178.743702] [ 178.744019] __schedule+0x893/0x2470 [ 178.744602] ? io_schedule_timeout+0x150/0x150 [ 178.745285] schedule+0xda/0x1b0 [ 178.745770] worker_thread+0x15f/0x1260 [ 178.746394] ? process_one_work+0x16a0/0x16a0 [ 178.747020] kthread+0x2ed/0x3a0 [ 178.747530] ? kthread_complete_and_exit+0x40/0x40 [ 178.748243] ret_from_fork+0x22/0x30 [ 178.748776] [ 178.749132] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 178.750075] Not tainted 6.0.0-rc7-next-20220929 #1 [ 178.750834] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 178.751886] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 178.753043] Workqueue: 0x0 (events_highpri) [ 178.753690] Call Trace: [ 178.754047] [ 178.754403] __schedule+0x893/0x2470 [ 178.754936] ? io_schedule_timeout+0x150/0x150 [ 178.755619] schedule+0xda/0x1b0 [ 178.756102] worker_thread+0x15f/0x1260 [ 178.756719] ? process_one_work+0x16a0/0x16a0 [ 178.757389] kthread+0x2ed/0x3a0 [ 178.757883] ? kthread_complete_and_exit+0x40/0x40 [ 178.758601] ret_from_fork+0x22/0x30 [ 178.759145] [ 178.759555] [ 178.759555] Showing all locks held in the system: [ 178.760414] 1 lock held by rcu_tasks_kthre/11: [ 178.761029] #0: ffffffff85406890 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 178.762377] 1 lock held by khungtaskd/25: [ 178.762929] #0: ffffffff85407360 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 178.764213] 1 lock held by in:imklog/193: [ 178.764770] #0: ffff88800d13b4e8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 178.765978] 2 locks held by syz-executor/4263: [ 178.766627] [ 178.766868] ============================================= [ 178.766868] [ 179.664999] Bluetooth: hci5: command 0x0406 tx timeout [ 179.665086] Bluetooth: hci3: command 0x0406 tx timeout [ 179.665940] Bluetooth: hci2: command 0x0406 tx timeout [ 179.666817] Bluetooth: hci1: command 0x0406 tx timeout [ 179.667607] Bluetooth: hci7: command 0x0406 tx timeout [ 179.668450] Bluetooth: hci4: command 0x0406 tx timeout [ 179.669230] Bluetooth: hci0: command 0x0406 tx timeout [ 179.670061] Bluetooth: hci6: command 0x0406 tx timeout VM DIAGNOSIS: 13:04:29 Registers: info registers vcpu 0 RAX=ffffed1007262359 RBX=ffff888039311ac0 RCX=ffffffff817bd131 RDX=ffffed1007262359 RSI=0000000000000008 RDI=ffff888039311ac0 RBP=ffffed1007262358 RSP=ffff88803811fa78 R8 =0000000000000000 R9 =ffff888039311ac7 R10=ffffed1007262358 R11=0000000000000001 R12=ffff88807a3b2ff9 R13=ffff888039311ac0 R14=0000000000000000 R15=0000000000000086 RIP=ffffffff81787804 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000555555fd4400 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f963e1a16e8 CR3=000000000ec14000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 483b6b727fec0b96 474e252da588edf4 YMM02=0000000000000000 0000000000000000 6b1e99b806172e3b 00000000000aea28 YMM03=0000000000000000 0000000000000000 80f09f19808d26a3 00000000000aec68 YMM04=0000000000000000 0000000000000000 6166e15139ca9ed3 0000000000135ad0 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 3fa33b345970d5ba 00000000000ae988 YMM07=0000000000000000 0000000000000000 a1fcdcf819d7e1e5 00000000000ae728 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff823ba3c1 RDI=ffffffff8765a9c0 RBP=ffffffff8765a980 RSP=ffff88800902f898 R8 =0000000000000001 R9 =000000000000000a R10=0000000000000020 R11=0000000000000001 R12=0000000000000020 R13=ffffffff8765a980 R14=0000000000000010 R15=ffffffff823ba3b0 RIP=ffffffff823ba419 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000562b845667a8 CR3=0000000017734000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 414ab5d2afb13367 YMM01=0000000000000000 0000000000000000 0000000000000000 3f847ae147ae147b YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 3f73f84ed46353b4 YMM04=0000000000000000 0000000000000000 00000000005c134d 00000000005c19e1 YMM05=0000000000000000 0000000000000000 00000000005c0ffe 00000000005c19e1 YMM06=0000000000000000 0000000000000000 00000000005d0546 00000000005d0bad YMM07=0000000000000000 0000000000000000 00000000008a1220 00000000008a1f4c YMM08=0000000000000000 0000000000000000 00000000005c134d 00000000005c1890 YMM09=0000000000000000 0000000000000000 00000000005c134d 00000000005c16d6 YMM10=0000000000000000 0000000000000000 00000000005c19e1 00000000005c134d YMM11=0000000000000000 0000000000000000 00000000005c19e1 00000000005c134d YMM12=0000000000000000 0000000000000000 00000000005c19e1 00000000005c134d YMM13=0000000000000000 0000000000000000 00000000005d0bad 00000000005c0ffe YMM14=0000000000000000 0000000000000000 00000000008a1f4c 00000000005d0546 YMM15=0000000000000000 0000000000000000 00000000004643c1 00000000008a1220