V_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = epoll_create(0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000009c0)=[r2, r4, r6, r7, r2], 0x5) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:28:57 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r4, &(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x100010, r5, 0x0) r6 = socket(0x3, 0x5, 0x8) bind$802154_raw(r6, &(0x7f0000000a40)={0x24, @long={0x3, 0x3, {0x300}}}, 0x14) memfd_secret(0x0) 06:28:57 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r5 = io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_io_uring_setup(0x16fc, &(0x7f0000000b00)={0x0, 0xfae9, 0x1, 0x3, 0x19d, 0x0, r5}, &(0x7f0000f2c000/0x1000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/67, 0x43}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/165, 0xa5}, {&(0x7f0000001dc0)=""/29, 0x1d}], 0x5) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x80c0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000001fc0)=0xffffad2a, 0x0, 0x4) 06:28:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) r6 = memfd_secret(0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b00)={0x46}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x400003, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r6) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40004) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000cc0)={0x15, 0x1, 0xe, 0x2, 0x0, 0xffff, 0x0, 0x141, 0x1}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c051) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r8, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 06:28:57 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc1) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000dc0)={&(0x7f0000000c80), 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r7, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) [ 65.314770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.319443] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.321152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.325232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.327192] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.337681] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.339898] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.345156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.352255] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.353483] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.354709] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.360302] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.365525] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.367163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.378572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.504728] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.515246] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.533253] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.538786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.543775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.575268] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.584323] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.588291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.588560] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.591771] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.602240] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.603839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.607787] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.609415] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.610799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.612814] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.617209] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.648256] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.682651] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.689399] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.693796] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.701239] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.704193] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.706296] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 65.710480] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 67.400843] Bluetooth: hci1: command tx timeout [ 67.401359] Bluetooth: hci0: command tx timeout [ 67.466014] Bluetooth: hci2: command tx timeout [ 67.656551] Bluetooth: hci3: command tx timeout [ 67.785028] Bluetooth: hci7: command tx timeout [ 67.785706] Bluetooth: hci5: command tx timeout [ 67.786273] Bluetooth: hci6: command tx timeout [ 67.786710] Bluetooth: hci4: command tx timeout [ 69.448083] Bluetooth: hci1: command tx timeout [ 69.448528] Bluetooth: hci0: command tx timeout [ 69.512701] Bluetooth: hci2: command tx timeout [ 69.704028] Bluetooth: hci3: command tx timeout [ 69.833003] Bluetooth: hci4: command tx timeout [ 69.833446] Bluetooth: hci5: command tx timeout [ 69.833821] Bluetooth: hci6: command tx timeout [ 69.834286] Bluetooth: hci7: command tx timeout [ 71.496832] Bluetooth: hci0: command tx timeout [ 71.498469] Bluetooth: hci1: command tx timeout [ 71.561022] Bluetooth: hci2: command tx timeout [ 71.752022] Bluetooth: hci3: command tx timeout [ 71.881761] Bluetooth: hci6: command tx timeout [ 71.882933] Bluetooth: hci7: command tx timeout [ 71.884110] Bluetooth: hci4: command tx timeout [ 71.885255] Bluetooth: hci5: command tx timeout [ 73.544099] Bluetooth: hci0: command tx timeout [ 73.544728] Bluetooth: hci1: command tx timeout [ 73.609101] Bluetooth: hci2: command tx timeout [ 73.800852] Bluetooth: hci3: command tx timeout [ 73.928419] Bluetooth: hci6: command tx timeout [ 73.928897] Bluetooth: hci7: command tx timeout [ 73.929360] Bluetooth: hci5: command tx timeout [ 73.929768] Bluetooth: hci4: command tx timeout [ 100.725274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.725964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.868318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.868950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.976013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.976634] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.108607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.111616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.394003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.394606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.517212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.517816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.569893] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.570498] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.664228] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.664833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.962196] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.962829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.066174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.066807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.416658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.417282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.532486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.539457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.615368] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.616015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.665934] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.666556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.769351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.769992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.796071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.796664] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 06:29:48 executing program 2: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000000)='./file0\x00', 0x6a, 0x200, 0x23456}, 0x5d) r0 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x208100) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = io_uring_setup(0x41b2, &(0x7f00000000c0)={0x0, 0xb3af, 0x20, 0x3, 0x155}) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000008, 0x100010, r1, 0x10000000) r2 = memfd_secret(0x80000) ioctl$TIOCGSERIAL(r2, 0x541e, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/213}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f00000002c0)={0x4, 0x1, 0x9, 0x4, 0x81, 0x5, 0x2}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x14) r4 = accept4$bt_l2cap(r2, &(0x7f0000000300)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xe, 0x80000) accept4(r4, &(0x7f0000000380)=@x25, &(0x7f0000000400)=0x80, 0x800) ioctl$RTC_AIE_OFF(r2, 0x7002) r5 = memfd_secret(0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r2) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x104}, 0x40400c4) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000980)={0x1, 0x1, 0x4, 0x5, 0x55, &(0x7f0000000580)}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000009c0)) r7 = memfd_secret(0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x541c, &(0x7f0000000a00)) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000a40)={0x2a, 0x14, 0x3, 0x2, 0x2, 0x6, 0x2, 0xd0, 0xfffffffffffffffe}) 06:29:48 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:29:48 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc1) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000dc0)={&(0x7f0000000c80), 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r7, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) 06:29:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) r6 = memfd_secret(0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b00)={0x46}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x400003, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r6) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40004) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000cc0)={0x15, 0x1, 0xe, 0x2, 0x0, 0xffff, 0x0, 0x141, 0x1}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c051) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r8, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 06:29:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$negate(0xd, 0x0, 0x3, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$clear(0x7, r1) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000180)='keyring\x00') keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) keyctl$negate(0xd, r2, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x1) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000001c0)='syzkaller\x00', 0x0) keyctl$reject(0x13, r1, 0x3, 0x8, r2) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r3, &(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x3}, r4) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$search(0xa, r5, &(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, r0) r6 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r7, r2, r6, 0x0) 06:29:48 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = epoll_create(0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000009c0)=[r2, r4, r6, r7, r2], 0x5) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:29:48 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r5 = io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_io_uring_setup(0x16fc, &(0x7f0000000b00)={0x0, 0xfae9, 0x1, 0x3, 0x19d, 0x0, r5}, &(0x7f0000f2c000/0x1000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/67, 0x43}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/165, 0xa5}, {&(0x7f0000001dc0)=""/29, 0x1d}], 0x5) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x80c0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000001fc0)=0xffffad2a, 0x0, 0x4) 06:29:48 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r4, &(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x100010, r5, 0x0) r6 = socket(0x3, 0x5, 0x8) bind$802154_raw(r6, &(0x7f0000000a40)={0x24, @long={0x3, 0x3, {0x300}}}, 0x14) memfd_secret(0x0) 06:29:48 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc1) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000dc0)={&(0x7f0000000c80), 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r7, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) 06:29:48 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:29:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$negate(0xd, 0x0, 0x3, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$clear(0x7, r1) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000180)='keyring\x00') keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) keyctl$negate(0xd, r2, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x1) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000001c0)='syzkaller\x00', 0x0) keyctl$reject(0x13, r1, 0x3, 0x8, r2) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r3, &(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x3}, r4) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$search(0xa, r5, &(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, r0) r6 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r7, r2, r6, 0x0) 06:29:48 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:29:56 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r5 = io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_io_uring_setup(0x16fc, &(0x7f0000000b00)={0x0, 0xfae9, 0x1, 0x3, 0x19d, 0x0, r5}, &(0x7f0000f2c000/0x1000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/67, 0x43}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/165, 0xa5}, {&(0x7f0000001dc0)=""/29, 0x1d}], 0x5) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x80c0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000001fc0)=0xffffad2a, 0x0, 0x4) 06:29:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) r6 = memfd_secret(0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b00)={0x46}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x400003, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r6) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40004) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000cc0)={0x15, 0x1, 0xe, 0x2, 0x0, 0xffff, 0x0, 0x141, 0x1}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c051) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r8, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 06:29:56 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:29:56 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:29:56 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = epoll_create(0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000009c0)=[r2, r4, r6, r7, r2], 0x5) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:29:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r4, &(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x100010, r5, 0x0) r6 = socket(0x3, 0x5, 0x8) bind$802154_raw(r6, &(0x7f0000000a40)={0x24, @long={0x3, 0x3, {0x300}}}, 0x14) memfd_secret(0x0) 06:29:56 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc1) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r3, &(0x7f0000000dc0)={&(0x7f0000000c80), 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x54, r7, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x840) socket$nl_generic(0x10, 0x3, 0x10) 06:29:56 executing program 1: r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$negate(0xd, 0x0, 0x3, r0) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$clear(0x7, r1) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$restrict_keyring(0x1d, r1, 0x0, &(0x7f0000000180)='keyring\x00') keyctl$get_persistent(0x16, 0xffffffffffffffff, r1) keyctl$negate(0xd, r2, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r0, r2, 0x1) keyctl$restrict_keyring(0x1d, r1, &(0x7f00000001c0)='syzkaller\x00', 0x0) keyctl$reject(0x13, r1, 0x3, 0x8, r2) r3 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, r0) r4 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r3, &(0x7f0000000280)='logon\x00', &(0x7f00000002c0)={'syz', 0x3}, r4) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f00000003c0)={'syz', 0x1}, 0x0, 0x0, r1) keyctl$search(0xa, r5, &(0x7f0000000400)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x3}, r0) r6 = add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0x0) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, 0x0, 0x0, r6) r7 = add_key$keyring(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, 0x0, 0x0, r5) keyctl$KEYCTL_MOVE(0x1e, r7, r2, r6, 0x0) 06:29:56 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc1) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:29:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) r6 = memfd_secret(0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b00)={0x46}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x400003, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r6) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40004) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000cc0)={0x15, 0x1, 0xe, 0x2, 0x0, 0xffff, 0x0, 0x141, 0x1}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c051) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r9, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x30, r8, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 06:29:56 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:29:56 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:29:56 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r5 = io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_io_uring_setup(0x16fc, &(0x7f0000000b00)={0x0, 0xfae9, 0x1, 0x3, 0x19d, 0x0, r5}, &(0x7f0000f2c000/0x1000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/67, 0x43}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/165, 0xa5}, {&(0x7f0000001dc0)=""/29, 0x1d}], 0x5) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x80c0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x118, &(0x7f0000001fc0)=0xffffad2a, 0x0, 0x4) 06:29:56 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:29:56 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc1) socket$nl_generic(0x10, 0x3, 0x10) 06:29:56 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = epoll_create(0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000009c0)=[r2, r4, r6, r7, r2], 0x5) getsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000a00), &(0x7f0000000a40)=0xc) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:29:56 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:29:56 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:29:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) r6 = memfd_secret(0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b00)={0x46}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x400003, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r6) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40004) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000cc0)={0x15, 0x1, 0xe, 0x2, 0x0, 0xffff, 0x0, 0x141, 0x1}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c051) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:29:56 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r4, &(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x100010, r5, 0x0) r6 = socket(0x3, 0x5, 0x8) bind$802154_raw(r6, &(0x7f0000000a40)={0x24, @long={0x3, 0x3, {0x300}}}, 0x14) memfd_secret(0x0) 06:29:56 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:29:56 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:29:56 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:29:56 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc1) socket$nl_generic(0x10, 0x3, 0x10) 06:29:56 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:29:56 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) r6 = syz_open_dev$ttys(0xc, 0x2, 0x1) r7 = epoll_create(0x6) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000009c0)=[r2, r4, r6, r7, r2], 0x5) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:30:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) r6 = memfd_secret(0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b00)={0x46}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x400003, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r6) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40004) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000cc0)={0x15, 0x1, 0xe, 0x2, 0x0, 0xffff, 0x0, 0x141, 0x1}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r8, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4c051) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:30:04 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r5 = io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_io_uring_setup(0x16fc, &(0x7f0000000b00)={0x0, 0xfae9, 0x1, 0x3, 0x19d, 0x0, r5}, &(0x7f0000f2c000/0x1000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/67, 0x43}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/165, 0xa5}, {&(0x7f0000001dc0)=""/29, 0x1d}], 0x5) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r6, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x80c0) 06:30:04 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:04 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:30:04 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r4, &(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x100010, r5, 0x0) socket(0x3, 0x5, 0x8) memfd_secret(0x0) 06:30:04 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41000) sendmsg$NLBL_UNLABEL_C_STATICLIST(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc1) socket$nl_generic(0x10, 0x3, 0x10) 06:30:04 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:04 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:05 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:05 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) r6 = memfd_secret(0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b00)={0x46}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x400003, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r6) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40004) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000cc0)={0x15, 0x1, 0xe, 0x2, 0x0, 0xffff, 0x0, 0x141, 0x1}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:30:13 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:30:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r4, &(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x100010, r5, 0x0) socket(0x3, 0x5, 0x8) memfd_secret(0x0) 06:30:13 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:13 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r5 = io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_io_uring_setup(0x16fc, &(0x7f0000000b00)={0x0, 0xfae9, 0x1, 0x3, 0x19d, 0x0, r5}, &(0x7f0000f2c000/0x1000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000c40)}, {&(0x7f0000000c80)=""/67, 0x43}, {&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/165, 0xa5}, {&(0x7f0000001dc0)=""/29, 0x1d}], 0x5) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:30:13 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:13 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000b40)={&(0x7f0000000a80), 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x1c, r2, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x41000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:13 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:13 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:13 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:13 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:13 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:13 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:30:13 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r5 = io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_io_uring_setup(0x16fc, &(0x7f0000000b00)={0x0, 0xfae9, 0x1, 0x3, 0x19d, 0x0, r5}, &(0x7f0000f2c000/0x1000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:30:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) r6 = memfd_secret(0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b00)={0x46}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x400003, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r6) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40004) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000cc0)={0x15, 0x1, 0xe, 0x2, 0x0, 0xffff, 0x0, 0x141, 0x1}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:30:13 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r4, &(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x100010, r5, 0x0) memfd_secret(0x0) 06:30:23 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:23 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:23 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r5 = io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_io_uring_setup(0x16fc, &(0x7f0000000b00)={0x0, 0xfae9, 0x1, 0x3, 0x19d, 0x0, r5}, &(0x7f0000f2c000/0x1000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:30:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r4, &(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:30:23 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:23 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:30:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) r6 = memfd_secret(0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b00)={0x46}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x400003, 0x0) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r6) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x14, r7, 0x300, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:30:23 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:23 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r4, &(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) memfd_secret(0x0) 06:30:23 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:23 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:23 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) memfd_secret(0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:23 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:23 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r5 = io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_io_uring_setup(0x16fc, &(0x7f0000000b00)={0x0, 0xfae9, 0x1, 0x3, 0x19d, 0x0, r5}, &(0x7f0000f2c000/0x1000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:30:23 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:30:23 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:31 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) r5 = io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_io_uring_setup(0x16fc, &(0x7f0000000b00)={0x0, 0xfae9, 0x1, 0x3, 0x19d, 0x0, r5}, &(0x7f0000f2c000/0x1000)=nil, &(0x7f0000e22000/0x1000)=nil, &(0x7f0000000b80), &(0x7f0000000bc0)) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:30:31 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) r6 = memfd_secret(0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b00)={0x46}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x400003, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000bc0), r6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:30:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r4, &(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) memfd_secret(0x0) 06:30:31 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:31 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:31 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:31 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:30:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r4, &(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x80) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) memfd_secret(0x0) 06:30:31 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:30:31 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:31 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:31 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:31 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:39 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) memfd_secret(0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockname(r4, &(0x7f00000007c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000840)=0x80) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:30:39 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:39 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r3, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, r5, 0x2, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x100048a0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) r6 = memfd_secret(0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b00)={0x46}, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f0000000b40), 0x400003, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:30:39 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:30:39 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r3], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:39 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r5, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:30:39 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r3], 0x1) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:30:39 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:39 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:30:39 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, r5, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:39 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) memfd_secret(0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:39 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) sendmsg$802154_raw(r1, &(0x7f00000006c0)={&(0x7f0000000580)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000680)={&(0x7f00000005c0)="081a18b00e97e82652036b801ca222977f8f2b1a2a016c7736d8ff0e1a25b03bced5f503c14c4becd96f126b9cc2d57417c469aad87956a57776e855045812b45713cb59154a32b30b2aaf6148790e1b4c1599c55f9d159eef1db4d5a3107c7cc2611c4a0f4f9ea0bc9d0134452b8528ecff97fa39503db3f31bc44fdec73181fd901c10fb6695052c2429f6ef040950ac551e7732078c22dc98ddfcdebd7a57a910cfca8e875491e9beeebf48c0195c588ae69930461b6560c2d63856930dc4", 0xc0}, 0x1, 0x0, 0x0, 0x50}, 0x40000) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:30:39 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, r4, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:39 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:39 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:30:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) r6 = memfd_secret(0x80000) setsockopt$inet6_icmp_ICMP_FILTER(r6, 0x1, 0x1, &(0x7f0000000b00)={0x46}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:30:39 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:30:39 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:47 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:30:47 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) memfd_secret(0x80000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:30:47 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:47 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:47 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:30:47 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:30:47 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) memfd_secret(0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:47 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000700), r0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:47 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:47 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:30:47 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) r4 = accept4(r2, 0x0, &(0x7f0000000240), 0x800) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f0000000ac0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x28}, 0xc, &(0x7f0000000a80)={&(0x7f0000000300)={0x778, r5, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4c87379f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'vxcan1\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e23, @empty}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf374}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'vlan1\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @private=0xa010100}}, {0x14, 0x2, @in={0x2, 0x4e23, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x3f, @rand_addr=' \x01\x00', 0xfffffa01}}}}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'veth1_to_hsr\x00'}}]}, @TIPC_NLA_NODE={0x1b0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "234a94693bfbae2e589ee5b28ddd233d5f544e729196db26"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "119ca7a9c5910eef045389fa8444670fa1854248c239b474e7b9"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "4fc449c6c8c4f8187ebe768b6ef1fbe81e6833809c9945"}}, @TIPC_NLA_NODE_ID={0xe1, 0x3, "f5d5c45da792bdf0650b3f278d554448ad0a67161d254eca11b3fe90ba35dfb10f4847d3d404376c2c19d4966e735a2ea1611b55e6dafadc15aeb46f7f240014ddc15482ea72543608851f622909f02ce90d365b95924b19e8cdc6bab5ecaceb29b316a5b22a6bfe2871b86b8332553b0b6f0768d511afe31123b78a4b67dd6438f33a21de0e6fb0d54d32a88eec910b174e9b59d92e679b10786b35151b2a2d42339124c7f4f46ceff02fd83d98da3ada86d6111eb6f5fc3cdae194633c3f557888f6980045567c0247dcee86b2be09327b5102613b901470fb039be0"}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "550ba1c5d9c0b9283bb134e9fe5c56066401c9191808a2"}}, @TIPC_NLA_NODE_ID={0xe9, 0x3, "0be8347c95b69a18b2b2e9be60f325c755d017bffa4ba99ff49b5fc59b850479d4e26aed70acd408a3b35f09125dbd9c5042a37a8fb87ff5dbb4f30ab515b84033e08ab3f931fd7602d89c28ab1ee75ab260c918873913cf980dad5fb19ba666aeed090c45586c1295b3d9c006efaf0c681ea1337dde68f5f414cc58367d483b8068c2cea801afa26f1109f3e5713728f55ca118d5de7b4c98ff948a1b5f0588c451b40ed77bc7ab7139a9465397a462415a31118dd81879b2ee4263f012c5c7af4e35f691a4ca61214ebb53c5aac1ed3925ae628bed23c70688feecc6f8acaac6ed6c82b1"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "ea74dcc188ee12c72164c2c6229ab55bb3745bb0f42f303d4cad6288a5eeb9488b941ff9"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "a038bca67caecd5b248560495b21380544eee7d79d12"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "f9d03ddcd8c0bd9ff0a5dc7e5b7ca374c47cd7ea707761"}}]}, @TIPC_NLA_LINK={0x98, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a3}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "fdedf60431a9d77d9a3c4f7b72f7db6810498050be53e14f5c46"}}, @TIPC_NLA_NODE_ID={0xec, 0x3, "0e0b52a7785ddcfc82f021e6144b8a61e537f751ab05dbe215644b42049d1c5911aac6b277cefa92033d54ae67b5e305e88cc714590b7a9e5dc830d6bd67afe5563ea78b6cc12de6907cfeb42268517a2b28813e42119ba2aec1f29cf140a2086f4e68fd0fce659f2e356cc4162e73df40b6ca7e2499704c301c5e79bffd8b83a58e4deec251299db426affc0105dd71b436aa9f0a0d38f30def8950d5ffe4d0eb73ff7f3d04394f5695f10559b22a76dc4a9e4d7d8610350ee319396144d09cb3fa9190c88c8156fb1bcad3314e05ac0391a57d7c1a91c361d04602117cc1b434aadb8d7390f757"}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x40}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x778}, 0x1, 0x0, 0x0, 0x40040}, 0x24000041) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:30:54 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640), 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) accept4(r2, 0x0, &(0x7f0000000240), 0x800) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:30:54 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:30:54 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:30:54 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:54 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:54 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:54 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffeffff, 0x6b}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "8bc8f0648f"}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "67e2a15cc7"}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x10) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:30:54 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:30:54 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:30:54 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:30:54 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:30:54 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) [ 187.787363] Bluetooth: hci2: command 0x0406 tx timeout [ 187.789153] Bluetooth: hci1: command 0x0406 tx timeout [ 187.790181] Bluetooth: hci3: command 0x0406 tx timeout [ 187.791671] Bluetooth: hci4: command 0x0406 tx timeout [ 187.792716] Bluetooth: hci6: command 0x0406 tx timeout [ 187.793761] Bluetooth: hci0: command 0x0406 tx timeout 06:31:03 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0x5e}, @IEEE802154_ATTR_BAT_EXT={0x5, 0x1a, 0x9}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x1}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x5}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x20014000) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:31:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) bind$802154_raw(r1, &(0x7f0000000400)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:03 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640), 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:03 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:31:03 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) accept4(r2, 0x0, &(0x7f0000000240), 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:31:03 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:03 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:31:03 executing program 2: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:31:03 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:31:03 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640), 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) setsockopt$inet6_icmp_ICMP_FILTER(r3, 0x1, 0x1, &(0x7f0000000200)={0x3}, 0x4) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:31:03 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:03 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000003c0)={0xcf0, 0x200, 0xffff, 0xf8, 0x6, 0x3, 0x40}, 0xc) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:03 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:03 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:31:03 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:31:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) [ 191.880116] Bluetooth: hci7: command 0x0406 tx timeout [ 191.881044] Bluetooth: hci5: command 0x0406 tx timeout 06:31:11 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:11 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:31:11 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:31:11 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:31:11 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000800), &(0x7f0000000840)=0x4) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) r3 = syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) io_uring_register$IORING_REGISTER_PROBE(r3, 0x8, &(0x7f0000000340)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0xc) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:11 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:31:11 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:31:11 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:31:11 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:31:11 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) syz_io_uring_setup(0x1df0, &(0x7f0000000240)={0x0, 0x94dc, 0x0, 0x1, 0x14c}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00000002c0), &(0x7f0000000300)) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:19 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:31:19 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:19 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:31:19 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) accept4(r2, &(0x7f0000000740)=@qipcrtr, &(0x7f00000007c0)=0x80, 0x80800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x3, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000180)=@ethernet={0x307}}, 0x1) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:19 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:31:19 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r3], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:19 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:31:19 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:31:19 executing program 6: socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:31:19 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) r6 = memfd_secret(0x0) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:19 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:31:19 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:19 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r3], 0x1) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:19 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000e80)={'wpan3\x00'}) 06:31:19 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:31:19 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x590e, &(0x7f0000000080)={0x0, 0x76c8, 0x10, 0x1, 0x120, 0x0, r0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:19 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:31:28 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r3], 0x1) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:28 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) syz_io_uring_setup(0x4e68, &(0x7f0000000640)={0x0, 0x95a8, 0x0, 0x1, 0x2d4, 0x0, r4}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000cb4000/0x4000)=nil, &(0x7f00000006c0), &(0x7f0000000700)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:31:28 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x38, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x38}}, 0x24000000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:31:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_SPLICE={0x1e, 0x3, 0x0, @fd_index=0xa, 0x7, {0x0, r0}, 0x3ff, 0x4, 0x1, {0x0, 0x0, r1}}, 0x8) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:28 executing program 6: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) 06:31:28 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:31:28 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640), 0x1) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:28 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:28 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:28 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003780)={'wlan0\x00'}) 06:31:28 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:31:28 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640), 0x1) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:28 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:28 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r3], 0x1) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:28 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:28 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) 06:31:37 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:37 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:37 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 06:31:37 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:37 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:37 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r2, 0x10000000) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:31:37 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000003600)=[{&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000024c0)=""/65, 0x41}, {&(0x7f0000002540)=""/144, 0x90}, {&(0x7f0000002600)=""/4096, 0x1000}], 0x4) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640), 0x1) ioctl$TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:37 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:37 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 06:31:37 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:37 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r4, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:37 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:37 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:37 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:45 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}, @TIPC_NLA_NET_ADDR={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2fae0ab6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xcba}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040040) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 06:31:45 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:45 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) 06:31:45 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:45 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:45 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r1, 0x10000000) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:31:45 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:45 executing program 7: sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:system_cron_spool_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_hsr\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x8080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:31:45 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:45 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:45 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) 06:31:45 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r5, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r6 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r6, 0x1) ioctl$TIOCMGET(r6, 0x5415, &(0x7f0000003680)) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:45 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) 06:31:45 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r1, 0x10000000) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:31:45 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:45 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:54 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) 06:31:55 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:55 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r1 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r0, r2, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x30, r1, 0x10000000) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3}) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:31:55 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:55 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:55 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r3], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:55 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) 06:31:55 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:31:55 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:55 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:31:55 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r3], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:55 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000700), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:31:55 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:31:55 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:31:55 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) 06:31:55 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:31:55 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:31:55 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd, 0x1, 0x0, 0x3f, 0x1}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:32:03 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r3], 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:03 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:32:03 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd, 0x1, 0x0, 0x3f, 0x1}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:32:03 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) 06:32:03 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) r1 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r1, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:03 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:32:03 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) r3 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r3, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:03 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:03 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:03 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) r1 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r1, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:12 executing program 5: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd, 0x1, 0x0, 0x3f, 0x1}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:32:12 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:12 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_io_uring_submit(r1, r3, &(0x7f0000000500)=@IORING_OP_TIMEOUT={0xb, 0x3, 0x0, 0x0, 0x2, &(0x7f00000004c0)}, 0x7) r4 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r4}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:32:12 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)) r1 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r1, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:12 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:32:12 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:12 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:12 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{0x0, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:12 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:12 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) 06:32:12 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{0x0, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:12 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:12 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd=r0, 0x1, 0x0, 0x3f, 0x1}, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:32:12 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)) r2 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r2, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:12 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:32:12 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:12 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) 06:32:12 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000280)=[r4], 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{0x0, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:19 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x208, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000410}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:19 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) 06:32:19 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:19 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)) r2 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r2, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:19 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x2) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:32:19 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r4, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:19 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:32:19 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:32:19 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x44, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x3f}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x6}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x84}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:19 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)) r2 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r2, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:20 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:20 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r4, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:20 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:32:20 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) 06:32:20 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r2}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:32:20 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:32:20 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:20 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = memfd_secret(0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x54, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffff53}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1ff}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x26000840}, 0x4000) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:20 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x2) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:20 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) 06:32:28 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r4, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:28 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:28 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:28 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:32:28 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) 06:32:28 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:32:28 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r2}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:32:28 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:28 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r4, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:28 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) 06:32:28 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:28 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:32:36 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:32:36 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:32:36 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000004c0)={{r3, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:36 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r2}) io_uring_register$IORING_REGISTER_PROBE(0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:32:36 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:36 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r1 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)) r2 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r2, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:36 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:36 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:36 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000004c0)={{r3, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:36 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:36 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:36 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r1 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)) r2 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r2, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:36 executing program 4: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:32:36 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:36 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000880)={0x0, 0xfad3, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:32:44 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, 0x0, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:32:44 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:44 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:44 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r1 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)) r2 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r2, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:44 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:44 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f00000004c0)={{r3, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:44 executing program 4: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:32:44 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r1 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r1}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:32:44 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, 0x0, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:32:44 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:44 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r4, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:44 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:32:44 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:44 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) 06:32:44 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:44 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r1 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r1}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:32:44 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:44 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r4, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:44 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) socket$nl_generic(0x10, 0x3, 0x10) 06:32:44 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) 06:32:53 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, 0x0, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:32:53 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 06:32:53 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x16}, @val={0x8}, @val={0xc, 0x99, {0x7, 0x71}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0\x00'}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "af7a440f64ef07fd5831b4f2d97fedef71310f506d1734a3"}], @NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "43e1c3ccd560d03804aabbe304bc06362bee09f0b4827c35"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c59bca535cfe78ff9fd9330842f776973c39c9a7fd0e0c04"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "09c55f73f4771c00b02d584dc425a14bbfc2328b0af39782"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "53379c0aedaa294ac5476f08eb0a54f1e1dab87b73793f20"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "acba82337e58bc27b7c594fd4640aefb167c9abf22b1293b"}], @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x138}}, 0x4000000) r0 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r1 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r1}) io_uring_register$IORING_REGISTER_PROBE(r0, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:32:53 executing program 4: syz_80211_join_ibss(0x0, &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:32:53 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:53 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r4, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:32:53 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:32:53 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:32:53 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:33:01 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:33:01 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:01 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:33:01 executing program 0: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:01 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 06:33:01 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000004c0)={{r2, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000003680)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:01 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0x0, 0x1, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:33:01 executing program 4: syz_80211_join_ibss(0x0, &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:01 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:01 executing program 0: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:01 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:33:01 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:33:01 executing program 7: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000cc0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 06:33:01 executing program 4: syz_80211_join_ibss(0x0, &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:01 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x46}, &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:33:01 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000004c0)={{r2, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000003680)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:01 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:01 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000004c0)={{r2, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000003680)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:01 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:01 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x114, &(0x7f0000000080), 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:33:09 executing program 2: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:33:09 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880), &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), &(0x7f0000000940)) memfd_secret(0x0) 06:33:09 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:33:09 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:09 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r2 = accept4$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000004c0)={{r3, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:09 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:09 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:09 executing program 0: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:09 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r2 = accept4$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000004c0)={{r3, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:09 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:09 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:09 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r2 = accept4$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000004c0)={{r3, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:09 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:09 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880), &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, 0x0, &(0x7f0000000940)) memfd_secret(0x0) 06:33:09 executing program 2: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:33:09 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:09 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:18 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:18 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:18 executing program 2: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:33:18 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:33:18 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:18 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:18 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880), &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, 0x0, &(0x7f0000000940)) memfd_secret(0x0) 06:33:18 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r4, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:18 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:33:18 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:18 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) 06:33:18 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r4, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:18 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880), &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, 0x0, &(0x7f0000000940)) memfd_secret(0x0) 06:33:18 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:18 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:18 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:33:18 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:33:18 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) 06:33:26 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r3 = accept4$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f00000004c0)={{r4, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r5 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r5, 0x1) ioctl$TIOCMGET(r5, 0x5415, &(0x7f0000003680)) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r7, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:26 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:33:26 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:26 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) 06:33:26 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:26 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:33:26 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:26 executing program 5: syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_io_uring_setup(0x920, &(0x7f0000000880), &(0x7f0000405000/0x3000)=nil, &(0x7f0000d61000/0x1000)=nil, &(0x7f0000000900), 0x0) memfd_secret(0x0) 06:33:26 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x101, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xffff, 0x1}, 0xe) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r1 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r2 = accept4$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000004c0)={{r3, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:26 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0xffff, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:26 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:35 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(0x0, &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:33:35 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:35 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:35 executing program 6: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:35 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:35 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x118, &(0x7f0000000000), 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:33:35 executing program 1: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r1 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r2 = accept4$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000004c0)={{r3, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:35 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:35 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:35 executing program 6: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:35 executing program 1: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r1 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r2 = accept4$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000004c0)={{r3, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:35 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(0x0, &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:33:35 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:35 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:35 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:35 executing program 3: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:33:35 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:35 executing program 6: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, 0x0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r1, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:35 executing program 1: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x80800) r1 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r2 = accept4$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000004c0)={{r3, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:35 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(0x0, &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) 06:33:35 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:44 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:44 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:44 executing program 3: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:33:44 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x2) 06:33:44 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:44 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:44 executing program 1: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r2 = accept4$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000004c0)={{r3, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:44 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:44 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:53 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) 06:33:53 executing program 1: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = accept4$bt_l2cap(r0, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r2 = accept4$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f00000004c0)={{r3, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r4 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r4, 0x1) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000003680)) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:53 executing program 3: syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:33:53 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x2) 06:33:53 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:53 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:53 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:53 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:53 executing program 1: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r1 = accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000004c0)={{r2, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000003680)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:53 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:53 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x2) 06:33:53 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) 06:33:53 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, 0x0, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:33:53 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:53 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:33:53 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:53 executing program 1: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r1 = accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000004c0)={{r2, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000003680)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:33:53 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) [ 360.441388] [ 360.441665] ===================================== [ 360.442279] WARNING: bad unlock balance detected! [ 360.442893] 6.19.0-rc5-next-20260116 #1 Not tainted [ 360.443553] ------------------------------------- [ 360.444167] syz-executor.0/5143 is trying to release lock (rcu_read_lock) at: [ 360.445084] [] __wait_on_freeing_inode+0x105/0x350 [ 360.445922] but there are no more locks to release! [ 360.446548] [ 360.446548] other info that might help us debug this: [ 360.447376] 4 locks held by syz-executor.0/5143: [ 360.447983] #0: ffff88800f6963f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 360.449116] #1: ffff88801b7b96f0 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 360.450400] #2: ffff88800f67a950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 360.452365] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 360.455022] [ 360.455022] stack backtrace: [ 360.456592] CPU: 1 UID: 0 PID: 5143 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 360.456616] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 360.456627] Call Trace: [ 360.456634] [ 360.456641] dump_stack_lvl+0xca/0x120 [ 360.456681] ? __wait_on_freeing_inode+0x105/0x350 [ 360.456705] print_unlock_imbalance_bug+0x118/0x130 [ 360.456729] ? __wait_on_freeing_inode+0x105/0x350 [ 360.456752] lock_release+0x1ee/0x270 [ 360.456776] __wait_on_freeing_inode+0x10a/0x350 [ 360.456800] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 360.456825] ? __pfx_var_wake_function+0x10/0x10 [ 360.456853] ? lock_is_held_type+0x9e/0x120 [ 360.456871] insert_inode_locked+0x25f/0x890 [ 360.456898] __ext4_new_inode+0x223d/0x4cd0 [ 360.456926] ? __pfx___ext4_new_inode+0x10/0x10 [ 360.456949] ? __pfx___dquot_initialize+0x10/0x10 [ 360.456978] ? __pfx_avc_has_perm+0x10/0x10 [ 360.457003] ext4_symlink+0x623/0xb40 [ 360.457033] ? __pfx_ext4_symlink+0x10/0x10 [ 360.457058] ? security_inode_permission+0x72/0xe0 [ 360.457080] vfs_symlink+0x44b/0x840 [ 360.457106] filename_symlinkat+0x158/0x440 [ 360.457129] ? __pfx_filename_symlinkat+0x10/0x10 [ 360.457151] ? strncpy_from_user+0x21b/0x2f0 [ 360.457178] __x64_sys_symlink+0x82/0x110 [ 360.457199] do_syscall_64+0xbf/0x420 [ 360.457220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.457241] RIP: 0033:0x7f79c9243427 [ 360.457255] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 360.457272] RSP: 002b:00007ffc54531668 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 360.457290] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f79c9243427 [ 360.457302] RDX: ffffffffffffffbc RSI: 00007f79c929e00e RDI: 00007f79c929d1dd [ 360.457314] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc545310e0 [ 360.457326] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 360.457337] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc54531730 [ 360.457354] [ 360.484060] ------------[ cut here ]------------ [ 360.484663] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.0/5143 [ 360.509684] Modules linked in: [ 360.511463] CPU: 1 UID: 0 PID: 5143 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 360.538283] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 360.707904] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 360.752788] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 360.792486] RSP: 0018:ffff88803f7ef9a0 EFLAGS: 00010286 [ 360.827150] RAX: 00000000ffffffff RBX: ffff88801dd5d280 RCX: ffffffff815660f7 [ 360.827881] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff88801dd5d67c [ 360.866551] RBP: ffff88801dd5d280 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 360.896741] R10: 0000000000000000 R11: 0000000000000001 R12: ffff88801dd5d280 [ 360.919472] R13: 0000000000000001 R14: ffffffff85c0f220 R15: ffff88801b55cf58 [ 360.947595] FS: 000055555efc4400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 360.962612] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.963258] CR2: 000055555efc4708 CR3: 000000000de12000 CR4: 0000000000350ef0 [ 360.963911] Call Trace: [ 360.964239] [ 360.965027] __wait_on_freeing_inode+0x10f/0x350 [ 360.965791] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 360.967077] ? __pfx_var_wake_function+0x10/0x10 [ 360.968488] ? lock_is_held_type+0x9e/0x120 [ 360.969734] insert_inode_locked+0x25f/0x890 [ 360.971606] __ext4_new_inode+0x223d/0x4cd0 [ 360.974447] ? __pfx___ext4_new_inode+0x10/0x10 [ 360.975839] ? __pfx___dquot_initialize+0x10/0x10 [ 360.976721] ? __pfx_avc_has_perm+0x10/0x10 [ 360.978749] ext4_symlink+0x623/0xb40 [ 360.981325] ? __pfx_ext4_symlink+0x10/0x10 [ 360.982462] ? security_inode_permission+0x72/0xe0 [ 360.984319] vfs_symlink+0x44b/0x840 [ 360.985757] filename_symlinkat+0x158/0x440 [ 360.987074] ? __pfx_filename_symlinkat+0x10/0x10 [ 360.987908] ? strncpy_from_user+0x21b/0x2f0 [ 360.990086] __x64_sys_symlink+0x82/0x110 [ 360.990881] do_syscall_64+0xbf/0x420 [ 360.991800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.992416] RIP: 0033:0x7f79c9243427 [ 360.992823] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 58 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 360.994478] RSP: 002b:00007ffc54531668 EFLAGS: 00000206 ORIG_RAX: 0000000000000058 [ 360.995212] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f79c9243427 [ 360.995849] RDX: ffffffffffffffbc RSI: 00007f79c929e00e RDI: 00007f79c929d1dd [ 360.996533] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc545310e0 [ 360.997220] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 360.997859] R13: 0000000000000000 R14: 0000000000000001 R15: 00007ffc54531730 [ 361.000835] [ 361.001099] irq event stamp: 633 [ 361.001404] hardirqs last enabled at (633): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 361.002361] hardirqs last disabled at (632): [] _raw_spin_lock_irqsave+0x53/0x60 [ 361.003276] softirqs last enabled at (628): [] kernel_fpu_end+0x59/0x70 [ 361.004126] softirqs last disabled at (626): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 361.005046] ---[ end trace 0000000000000000 ]--- 06:33:54 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:34:01 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:34:01 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:34:01 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:34:01 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x0) 06:34:01 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:34:01 executing program 1: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r1 = accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000004c0)={{r2, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000003680)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:34:01 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:34:01 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(0x0, &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:34:01 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:34:01 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:34:01 executing program 3: syz_memcpy_off$IO_URING_METADATA_FLAGS(0x0, 0x0, &(0x7f0000000000), 0x0, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, &(0x7f0000000040)=0x70, 0x0, 0x4) r0 = syz_io_uring_setup(0x2495, &(0x7f00000002c0)={0x0, 0x59b8, 0x20, 0x3, 0x376}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000340)=0x0, &(0x7f0000000380)) r2 = syz_io_uring_setup(0x452f, &(0x7f00000003c0)={0x0, 0x2fdd, 0x10, 0x1, 0xd0}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000440), &(0x7f0000000480)) r3 = syz_io_uring_setup(0x23de, &(0x7f0000000540)={0x0, 0xe60, 0x4, 0x2, 0x1fc, 0x0, r0}, &(0x7f0000c00000/0x400000)=nil, &(0x7f0000c2c000/0x3000)=nil, &(0x7f00000005c0), &(0x7f0000000600)) io_uring_setup(0x7b9f, &(0x7f0000000740)={0x0, 0x467, 0x1, 0x2, 0xd3, 0x0, r3}) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f00000007c0)={0x0, 0x0, 0x0, '\x00', [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, 0x20) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, 0x0, 0x900, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x2c0008c4}, 0x41) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x1b}}}}, ["", "", "", ""]}, 0x20}}, 0x40881) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x11c, &(0x7f0000000c00)=0x3f, 0x0, 0x4) syz_genetlink_get_family_id$fou(&(0x7f0000001ec0), 0xffffffffffffffff) 06:34:01 executing program 5: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:34:01 executing program 0: bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed, 0x0, 0x1}, 0xe) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x40, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8000}, 0xe) r1 = accept4$bt_l2cap(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) r2 = accept4$bt_l2cap(r1, &(0x7f0000000100), &(0x7f0000000140)=0xe, 0x800) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000002c0)) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r4, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:34:01 executing program 1: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r1 = accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000004c0)={{r2, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000003680)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:34:01 executing program 2: syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x0) 06:34:01 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:34:01 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:34:01 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(0x0, &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:34:01 executing program 1: bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x800) getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x6) r1 = accept4$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x0, @none}, &(0x7f0000000240)=0xe, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000002c0)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000004c0)={{r2, 0x1f, 0xffff, 0x19e, 0x431820ae, 0x800, 0x8000, 0xd, 0x7fffffff, 0xfffffe01, 0x3, 0xfffffffffffff966, 0x4, 0x6, 0x8}}) r3 = memfd_secret(0x0) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000003640)=r3, 0x1) ioctl$TIOCMGET(r3, 0x5415, &(0x7f0000003680)) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000036c0), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003700)={'wlan0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000003780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000003880)={&(0x7f0000003740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000003840)={&(0x7f00000037c0)={0x4c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "0d2a137d093047505f3271116dd3a06a"}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x32}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x40040) 06:34:01 executing program 4: syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000880), 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x54, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000012}, 0x4004000) syz_open_dev$ttys(0xc, 0x2, 0x1) epoll_create(0x6) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800001}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x40, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_lib_t:s0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d5}, 0x80d4) 06:34:01 executing program 7: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x800) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x98, r0, 0x928, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xe}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'macvlan0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbmon_device_t:s0\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000}, 0x20044081) memfd_secret(0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 06:34:01 executing program 6: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) syz_80211_join_ibss(0x0, &(0x7f0000000180)=@default_ap_ssid, 0x6, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x7c, r0, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:su_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dummy0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:dhcpc_exec_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x9000}, 0x4000001) memfd_secret(0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000600), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x24, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x40044) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) VM DIAGNOSIS: 06:33:53 Registers: info registers vcpu 0 RAX=00007f038664b000 RBX=800000003c3e8007 RCX=ffffffff819fb843 RDX=ffff88800f688000 RSI=ffffffff819fb93e RDI=0000000000000007 RBP=0000000000000018 RSP=ffff888040e8f628 R8 =0000000000000000 R9 =fffff940001e1f3e R10=800000003c3e8007 R11=0000000000000000 R12=800000003c3e8007 R13=dffffc0000000000 R14=ffff888040e8faa8 R15=ffff888042ae6258 RIP=ffffffff81758268 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe6b00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000561e004ccd80 CR3=0000000005c8e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=ff00000000ff000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000069 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88806cf08938 R8 =0000000000000000 R9 =ffffed10013cf046 R10=0000000000000069 R11=6572617764726148 R12=0000000000000069 R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055555efc4400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe5e00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055555efc4708 CR3=000000000de12000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=ffffffff0000ff00000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000