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", 0x1000, 0x20000000, 0x1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r3, r4}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, r3, 0x10, 0x0, @ib={0x1b, 0x1, 0x871, {"0e32e26a77bbbf9d3f50791248e121b3"}, 0x2566972, 0x4, 0x7f}}}, 0xa0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, r3, 0x30, 0x0, @in6={0xa, 0x4e22, 0xfffffffb, @remote, 0x101}}}, 0xa0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) syz_io_uring_setup(0xee9, &(0x7f0000000300)={0x0, 0x464d, 0x4, 0x1, 0x1ea}, &(0x7f0000000380), &(0x7f00000003c0)) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000001400)=@IORING_OP_SEND={0x1a, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)="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", 0x1000, 0x20000000, 0x1}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r3, r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000240)={0x16, 0x98, 0xfa00, {&(0x7f0000000180), 0x1, r3, 0x10, 0x0, @ib={0x1b, 0x1, 0x871, {"0e32e26a77bbbf9d3f50791248e121b3"}, 0x2566972, 0x4, 0x7f}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000040)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x1, r3, 0x30, 0x0, @in6={0xa, 0x4e22, 0xfffffffb, @remote, 0x101}}}, 0xa0) (async) 00:18:16 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0xfffffff0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:16 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async, rerun: 32) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x24c840) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000500)={'binder0\x00'}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:16 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x80800) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mem_exclusive\x00', 0x2, 0x0) 00:18:16 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) 00:18:16 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3d7e21a998b15658}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x94, r0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x30}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048010}, 0x8000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="81cf2bc5", @ANYRESDEC=r1, @ANYBLOB="00000000000000000000000100008000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x40) 00:18:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x3}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:16 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x24c840) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000500)={'binder0\x00'}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x24c840) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r3, 0xc1086201, &(0x7f0000000500)={'binder0\x00'}) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:16 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:16 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3d7e21a998b15658}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x94, r0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x30}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048010}, 0x8000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="81cf2bc5", @ANYRESDEC=r1, @ANYBLOB="00000000000000000000000100008000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x40) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3d7e21a998b15658}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x94, r0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x30}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048010}, 0x8000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) (async) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="81cf2bc5", @ANYRESDEC=r1, @ANYBLOB="00000000000000000000000100008000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x40) (async) 00:18:16 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffff1e0, 0x80000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0x101, 0x4, [0xfffffffc]}) 00:18:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x9}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:16 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) 00:18:16 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000500)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x4, 'ipvlan0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x2bc, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:16 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:16 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffff1e0, 0x80000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0x101, 0x4, [0xfffffffc]}) 00:18:16 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) (async) 00:18:16 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLIST(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3d7e21a998b15658}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x94, r0, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}, @NLBL_UNLABEL_A_SECCTX={0x25, 0x7, 'system_u:object_r:dpkg_lock_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x30}}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048010}, 0x8000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000000c0), r1) sendmsg$NLBL_MGMT_C_LISTALL(r3, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x1c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) sendmsg$NLBL_MGMT_C_LISTALL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0x4, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="81cf2bc5", @ANYRESDEC=r1, @ANYBLOB="00000000000000000000000100008000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x40) 00:18:16 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:16 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffff1e0, 0x80000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0x101, 0x4, [0xfffffffc]}) 00:18:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0xd}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:16 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x3f, 0x800) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000000c0)={0x8, 0x9}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x8}}, 0x20) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:16 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x0, 0x0) syz_io_uring_setup(0x690c, &(0x7f0000000040)={0x0, 0x991e, 0x800, 0x2, 0xd2}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x53, 0x0, 0x0, 0x0, 0x23456}) epoll_create1(0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x30, r3, 0x10000000) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f00000002c0)={'binder1\x00'}) 00:18:16 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) 00:18:16 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x4485c0) 00:18:16 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000500)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x4, 'ipvlan0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x2bc, &(0x7f00000007c0)=ANY=[@ANYBLOB="df00004e8c2a00c847a324b2b85bc31bfd913a88b33c4f73042cc4b28d42639836c2d8cfb4cd1ac3370b628c22c6f50cd00e459ffbfaba98ad29705da3479ffdb254cc9748643337f3a1e47c1ee177ab6be76c17efe69d9a57c5375be2da095f1ddb9df7609891d3c9317db24421dfd2047c867ae8ed5ba6082e1614a7719ce91c175c6d911e7cfb2209e58bcd44eae44cbf0de03a4028080979a45ce561eaa4a20c4ef7c709a296fa6ecb6ae1a677204193110efceda4685d1513a9f36d9ac5c9246f1c3ec7cf4fe59d7acb04ea3f9e8884e6e807839b4f27f012dd12707bd28b9c891daac100ee00004e9b71025eb54d1dfc4a80dc1cbffedc59f435fe21bf024933779b0fb7fed7f8e5b6aeda567ed6714ede56fb5396efe918f5b0d10e2e7b16a51bdfc98e24493b1f737e84669dccbe58f29b089bcb87656b4209805c12a15fbcd67a2298fb9f635e38b5423e79eada0a4b15c950fc6543c10eded39beed337d66cf771e0b1fb627a2ed93691aad15124c283e5f02805e786076ebbbe3f5856f926be866200774841ca249eff910255df07473ab92020524b32e0495840663dfa2a3043b5234933a590c5e58a781fdfac72021ca27545ace5141b4e81d3169f5bd58ac055efddff3e86b0a3f3fe613d6b9a3303d1c64e00004500004e32fdf8876121dd5de77e67ed2aa0c8e54d2f08d588c6e261a4705a998487f0ed2d2e0c8db11305da811b0a407c1ef6ee0d2e8fa32e69fbf89e325415da6a88cf7dd6dec9fd0000009400004e94e70ea079c682be59bd7112914120be4e2a62b8d9e3edc688ff3246925b3263af308da5a0cf600b8f31a7abb55e0da6404a25e47bba8bf67ebe1abe917f36b0599b9ae3b4c8dcf26dc1d62677c0a18b939988f4021b3aae9ecaa1de62565c5f94875abaa7c9f8b9b5a0caa5c620cb7b1cee338f94a89f7243fc63d2c76feea69c7e05fa8e85b769b67e6ad4ea3cbc841f72d59c"]) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:16 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x13}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:17 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x690c, &(0x7f0000000040)={0x0, 0x991e, 0x800, 0x2, 0xd2}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x53, 0x0, 0x0, 0x0, 0x23456}) epoll_create1(0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x30, r3, 0x10000000) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f00000002c0)={'binder1\x00'}) 00:18:17 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x3f, 0x800) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000000c0)={0x8, 0x9}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x8}}, 0x20) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:17 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) 00:18:17 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x4485c0) 00:18:17 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) 00:18:17 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x4485c0) 00:18:17 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x3f, 0x800) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000000c0)={0x8, 0x9}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x13f, 0x8}}, 0x20) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:17 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x690c, &(0x7f0000000040)={0x0, 0x991e, 0x800, 0x2, 0xd2}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xa, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x53, 0x0, 0x0, 0x0, 0x23456}) (async) epoll_create1(0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000180)=&(0x7f0000000140)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x8, 0x30, r3, 0x10000000) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f00000002c0)={'binder1\x00'}) 00:18:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x21}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2000000000800, 0x84001) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x1ff) 00:18:17 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000500)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x4, 'ipvlan0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x2bc, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"]) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:17 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000600)=ANY=[@ANYBLOB="68060000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="5c01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000400040040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400cb09000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="740102803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400200000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000000080004007601000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004008100000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040080040000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="f0010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004006effffff08000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400a30e000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r4, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="7401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008100000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400050000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB], 0x668}, 0x1, 0x0, 0x0, 0x88010}, 0x20000000) r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r7, 0x541b, 0x0) 00:18:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:17 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) syz_io_uring_setup(0x453c, &(0x7f0000000000)={0x0, 0x73e9, 0x40, 0x0, 0x158}, &(0x7f0000000080), &(0x7f00000000c0)) 00:18:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2000000000800, 0x84001) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x1ff) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2000000000800, 0x84001) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x1ff) (async) 00:18:17 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000280)={'custom1\x00'}) 00:18:17 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000280)={'custom1\x00'}) 00:18:17 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x2000000000800, 0x84001) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x1ff) 00:18:17 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000600)=ANY=[@ANYBLOB="68060000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="5c01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000400040040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400cb09000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="740102803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400200000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000000080004007601000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004008100000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040080040000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="f0010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004006effffff08000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400a30e000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r4, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="7401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008100000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400050000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB], 0x668}, 0x1, 0x0, 0x0, 0x88010}, 0x20000000) (async) r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r7, 0x541b, 0x0) 00:18:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x23}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:17 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) syz_io_uring_setup(0x453c, &(0x7f0000000000)={0x0, 0x73e9, 0x40, 0x0, 0x158}, &(0x7f0000000080), &(0x7f00000000c0)) 00:18:17 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x32}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x9c, 0x7c681) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r1, 0x311}, 0x14}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4000800) 00:18:18 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0xa5e, 0x290801) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f, 0x1}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:18 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000280)={'custom1\x00'}) 00:18:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) syz_io_uring_setup(0x453c, &(0x7f0000000000)={0x0, 0x73e9, 0x40, 0x0, 0x158}, &(0x7f0000000080), &(0x7f00000000c0)) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000600)=ANY=[@ANYBLOB="68060000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="5c01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000400040040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400cb09000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="740102803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400200000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000000080004007601000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004008100000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040080040000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="f0010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004006effffff08000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400a30e000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r4, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="7401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008100000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400050000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB], 0x668}, 0x1, 0x0, 0x0, 0x88010}, 0x20000000) r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r7, 0x541b, 0x0) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0x1, 0x58, &(0x7f00000004c0)}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x4) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000600)=ANY=[@ANYBLOB="68060000", @ANYRES16=0x0, @ANYBLOB="04002bbd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="5c01028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000002003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000400000034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000400040040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400cb09000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="740102803c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400200000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000000080004007601000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004008100000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040080040000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="f0010280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004006effffff08000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400a30e000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000200000008000600", @ANYRES32=r4, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000600000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000008000100", @ANYRES32=0x0, @ANYBLOB="7401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004008100000008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400050000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB], 0x668}, 0x1, 0x0, 0x0, 0x88010}, 0x20000000) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r7, 0x541b, 0x0) (async) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x2}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x9c, 0x7c681) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r1, 0x311}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4000800) 00:18:18 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0xa5e, 0x290801) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f, 0x1}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0xa5e, 0x290801) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f, 0x1}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:18 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder0\x00'}) 00:18:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000040), 0x2fc9b6a9, 0x800) 00:18:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = socket$inet(0x2, 0x3, 0x7f) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x800) 00:18:18 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder0\x00'}) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x3}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x9c, 0x7c681) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r1, 0x311}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x8080}, 0x4000800) 00:18:18 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder0\x00'}) 00:18:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000040), 0x2fc9b6a9, 0x800) 00:18:18 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0xa5e, 0x290801) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f, 0x1}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (rerun: 32) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x4}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x7f) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x800) 00:18:18 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x802, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000000c0)) 00:18:18 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000040), 0x2000000000000, 0x10000) 00:18:18 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)=@polexpire={0x20c, 0x1b, 0x10, 0x70bd2a, 0x25dfdbfb, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x4e20, 0x0, 0x4e21, 0x5, 0xa, 0x20, 0x20, 0x0, r4, 0xee00}, {0xfffffffffffffbc5, 0xf7, 0x1, 0xfffffffffffffff8, 0x10001, 0x1, 0x1, 0x100000000}, {0x8, 0x6, 0x6, 0x6}, 0xfffffffd, 0x6e6bb0, 0x1, 0x0, 0x1, 0x3}, 0x1}, [@lastused={0xc, 0xf, 0x8}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e22, @in=@remote}}, @algo_auth={0x124, 0x1, {{'sha384-ssse3\x00'}, 0x6e0, "817f8f5fadb95d8b9953c2d1576cb2f0feffcb725515e5ea27d3536d9b5c4d598732b8305555b70e8d8601c8a73b5bcf5c81bc004053b875dacdb25b4f1cb022db541f9bf092ff2b53c0f76544aa5a25436179f09e1033384ce56fb379a888a8383764da766d9964dce596b8d09adca9f0701e7e817e885af9da670cf420c5e5bce014f00866fbf95f27d0370509503b0e4c027cac67749bb46f190e7ad221a57f48750e3741a97c8325583d0e84e97b7c09cfd1c4b437fff66ae8d57319b2b2ec7f4ea92afd900185e11e7b4d98f517d3a72374ef6170a394e4b9c8"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:18 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000040), 0x2000000000000, 0x10000) 00:18:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000040), 0x2fc9b6a9, 0x800) 00:18:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = socket$inet(0x2, 0x3, 0x7f) accept4$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x800) 00:18:18 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000040), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2000000000000, 0x10000) (async) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x5}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)=@polexpire={0x20c, 0x1b, 0x10, 0x70bd2a, 0x25dfdbfb, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x4e20, 0x0, 0x4e21, 0x5, 0xa, 0x20, 0x20, 0x0, r4, 0xee00}, {0xfffffffffffffbc5, 0xf7, 0x1, 0xfffffffffffffff8, 0x10001, 0x1, 0x1, 0x100000000}, {0x8, 0x6, 0x6, 0x6}, 0xfffffffd, 0x6e6bb0, 0x1, 0x0, 0x1, 0x3}, 0x1}, [@lastused={0xc, 0xf, 0x8}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e22, @in=@remote}}, @algo_auth={0x124, 0x1, {{'sha384-ssse3\x00'}, 0x6e0, "817f8f5fadb95d8b9953c2d1576cb2f0feffcb725515e5ea27d3536d9b5c4d598732b8305555b70e8d8601c8a73b5bcf5c81bc004053b875dacdb25b4f1cb022db541f9bf092ff2b53c0f76544aa5a25436179f09e1033384ce56fb379a888a8383764da766d9964dce596b8d09adca9f0701e7e817e885af9da670cf420c5e5bce014f00866fbf95f27d0370509503b0e4c027cac67749bb46f190e7ad221a57f48750e3741a97c8325583d0e84e97b7c09cfd1c4b437fff66ae8d57319b2b2ec7f4ea92afd900185e11e7b4d98f517d3a72374ef6170a394e4b9c8"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:18 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x802, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000000c0)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x802, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000000c0)) (async) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x6}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000500)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)=@polexpire={0x20c, 0x1b, 0x10, 0x70bd2a, 0x25dfdbfb, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x4e20, 0x0, 0x4e21, 0x5, 0xa, 0x20, 0x20, 0x0, r4, 0xee00}, {0xfffffffffffffbc5, 0xf7, 0x1, 0xfffffffffffffff8, 0x10001, 0x1, 0x1, 0x100000000}, {0x8, 0x6, 0x6, 0x6}, 0xfffffffd, 0x6e6bb0, 0x1, 0x0, 0x1, 0x3}, 0x1}, [@lastused={0xc, 0xf, 0x8}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e22, @in=@remote}}, @algo_auth={0x124, 0x1, {{'sha384-ssse3\x00'}, 0x6e0, "817f8f5fadb95d8b9953c2d1576cb2f0feffcb725515e5ea27d3536d9b5c4d598732b8305555b70e8d8601c8a73b5bcf5c81bc004053b875dacdb25b4f1cb022db541f9bf092ff2b53c0f76544aa5a25436179f09e1033384ce56fb379a888a8383764da766d9964dce596b8d09adca9f0701e7e817e885af9da670cf420c5e5bce014f00866fbf95f27d0370509503b0e4c027cac67749bb46f190e7ad221a57f48750e3741a97c8325583d0e84e97b7c09cfd1c4b437fff66ae8d57319b2b2ec7f4ea92afd900185e11e7b4d98f517d3a72374ef6170a394e4b9c8"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000500)=0x4) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000780)={&(0x7f0000000540)=@polexpire={0x20c, 0x1b, 0x10, 0x70bd2a, 0x25dfdbfb, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x4e20, 0x0, 0x4e21, 0x5, 0xa, 0x20, 0x20, 0x0, r4, 0xee00}, {0xfffffffffffffbc5, 0xf7, 0x1, 0xfffffffffffffff8, 0x10001, 0x1, 0x1, 0x100000000}, {0x8, 0x6, 0x6, 0x6}, 0xfffffffd, 0x6e6bb0, 0x1, 0x0, 0x1, 0x3}, 0x1}, [@lastused={0xc, 0xf, 0x8}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e23, 0x4e22, @in=@remote}}, @algo_auth={0x124, 0x1, {{'sha384-ssse3\x00'}, 0x6e0, "817f8f5fadb95d8b9953c2d1576cb2f0feffcb725515e5ea27d3536d9b5c4d598732b8305555b70e8d8601c8a73b5bcf5c81bc004053b875dacdb25b4f1cb022db541f9bf092ff2b53c0f76544aa5a25436179f09e1033384ce56fb379a888a8383764da766d9964dce596b8d09adca9f0701e7e817e885af9da670cf420c5e5bce014f00866fbf95f27d0370509503b0e4c027cac67749bb46f190e7ad221a57f48750e3741a97c8325583d0e84e97b7c09cfd1c4b437fff66ae8d57319b2b2ec7f4ea92afd900185e11e7b4d98f517d3a72374ef6170a394e4b9c8"}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48010) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:18 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=""/85, &(0x7f0000000080)=""/176, &(0x7f0000000140)=""/107, 0x6000}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:18 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0xff, 0x802) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000040)) 00:18:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = socket(0x1a, 0x80000, 0x28) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r3, r4}}, 0x18) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@private1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0x4e20, 0x7, 0xa, 0x80, 0x0, 0xff, 0x0, 0xffffffffffffffff}, {0x6, 0xffffffffffff8001, 0x10000000, 0x7f, 0x8, 0x81, 0x4, 0x4}, {0x7, 0x9, 0x5, 0x88}, 0x0, 0x6e6bba, 0x2, 0x1, 0xc0292668268c7183, 0x1}, {{@in=@empty, 0x4d3, 0x32}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x2, 0xf7, 0x6, 0x2, 0x10001}}, 0xe8) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000840)={0xf, 0x8, 0xfa00, {r3, 0x10}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x204, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x4044}, 0x4000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) r9 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r9) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x7}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @loopback}, r4}}, 0x30) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:18 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000080), 0xff, 0x802) (async) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000040)) 00:18:18 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x802, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000000c0)) 00:18:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = socket(0x1a, 0x80000, 0x28) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r3, r4}}, 0x18) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@private1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0x4e20, 0x7, 0xa, 0x80, 0x0, 0xff, 0x0, 0xffffffffffffffff}, {0x6, 0xffffffffffff8001, 0x10000000, 0x7f, 0x8, 0x81, 0x4, 0x4}, {0x7, 0x9, 0x5, 0x88}, 0x0, 0x6e6bba, 0x2, 0x1, 0xc0292668268c7183, 0x1}, {{@in=@empty, 0x4d3, 0x32}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x2, 0xf7, 0x6, 0x2, 0x10001}}, 0xe8) (async) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@private1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0x4e20, 0x7, 0xa, 0x80, 0x0, 0xff, 0x0, 0xffffffffffffffff}, {0x6, 0xffffffffffff8001, 0x10000000, 0x7f, 0x8, 0x81, 0x4, 0x4}, {0x7, 0x9, 0x5, 0x88}, 0x0, 0x6e6bba, 0x2, 0x1, 0xc0292668268c7183, 0x1}, {{@in=@empty, 0x4d3, 0x32}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x2, 0xf7, 0x6, 0x2, 0x10001}}, 0xe8) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000840)={0xf, 0x8, 0xfa00, {r3, 0x10}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x204, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x4044}, 0x4000) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x204, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x4044}, 0x4000) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) r9 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r9) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x9}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @loopback}, r4}}, 0x30) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:18 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=""/85, &(0x7f0000000080)=""/176, &(0x7f0000000140)=""/107, 0x6000}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:18 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080), 0xff, 0x802) (async) syz_open_dev$mouse(&(0x7f0000000080), 0xff, 0x802) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000040)) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000040)) 00:18:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = socket(0x1a, 0x80000, 0x28) (async, rerun: 64) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r3, r4}}, 0x18) (async, rerun: 32) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000880)={{{@in6=@private1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e22, 0x0, 0x4e20, 0x7, 0xa, 0x80, 0x0, 0xff, 0x0, 0xffffffffffffffff}, {0x6, 0xffffffffffff8001, 0x10000000, 0x7f, 0x8, 0x81, 0x4, 0x4}, {0x7, 0x9, 0x5, 0x88}, 0x0, 0x6e6bba, 0x2, 0x1, 0xc0292668268c7183, 0x1}, {{@in=@empty, 0x4d3, 0x32}, 0x2, @in=@rand_addr=0x64010101, 0x0, 0x1, 0x2, 0xf7, 0x6, 0x2, 0x10001}}, 0xe8) (async, rerun: 32) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000840)={0xf, 0x8, 0xfa00, {r3, 0x10}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000800)={&(0x7f0000000000), 0xc, &(0x7f00000007c0)={&(0x7f0000000580)={0x204, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}]}}]}, 0x204}, 0x1, 0x0, 0x0, 0x4044}, 0x4000) (async) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000980)='tasks\x00', 0x2, 0x0) (async) r9 = getpid() prctl$PR_SET_PTRACER(0x59616d61, r9) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x3, @loopback}, r4}}, 0x30) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:18 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=""/85, &(0x7f0000000080)=""/176, &(0x7f0000000140)=""/107, 0x6000}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=""/85, &(0x7f0000000080)=""/176, &(0x7f0000000140)=""/107, 0x6000}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:18 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) write$damon_init_regions(r1, &(0x7f0000000040)={{' ', r2}, {' ', 0x6}, {' ', 0x1}}, 0x3f) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0x2, 0x7f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:18 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)={0x6, 0x0, [{0x10000, 0x15, &(0x7f00000000c0)=""/21}, {0x1000, 0x55, &(0x7f0000000500)=""/85}, {0x4, 0x1000, &(0x7f0000001580)=""/4096}, {0x5000, 0x3c, &(0x7f0000000100)=""/60}, {0x2000, 0xb6, &(0x7f0000000580)=""/182}, {0x3000, 0x9b, &(0x7f0000000640)=""/155}]}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000a00)={0x18, 0xd, 0x1, {{0x10, 0x3, 0x2}}}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000840)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000008c0)={0x6, 0x118, 0xfa00, {{0x0, 0x3, "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", 0x6, 0xf, 0xd9, 0x8, 0xff, 0x6, 0x7f}, r4}}, 0x120) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffd, 0x569ef08b3dd36d6e) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x220200) 00:18:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x80000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r4, r5}}, 0x18) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, r4}}, 0x38) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x2}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0xf1c, 0x10000) socket$inet(0x2, 0x6, 0x1f) 00:18:18 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)={0x6, 0x0, [{0x10000, 0x15, &(0x7f00000000c0)=""/21}, {0x1000, 0x55, &(0x7f0000000500)=""/85}, {0x4, 0x1000, &(0x7f0000001580)=""/4096}, {0x5000, 0x3c, &(0x7f0000000100)=""/60}, {0x2000, 0xb6, &(0x7f0000000580)=""/182}, {0x3000, 0x9b, &(0x7f0000000640)=""/155}]}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000a00)={0x18, 0xd, 0x1, {{0x10, 0x3, 0x2}}}, 0x18) (async) write$P9_RLOPEN(r1, &(0x7f0000000a00)={0x18, 0xd, 0x1, {{0x10, 0x3, 0x2}}}, 0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000840)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000008c0)={0x6, 0x118, 0xfa00, {{0x0, 0x3, "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", 0x6, 0xf, 0xd9, 0x8, 0xff, 0x6, 0x7f}, r4}}, 0x120) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:18 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) write$damon_init_regions(r1, &(0x7f0000000040)={{' ', r2}, {' ', 0x6}, {' ', 0x1}}, 0x3f) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0x2, 0x7f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x80000) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r4, r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, r4}}, 0x38) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x3}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffd, 0x569ef08b3dd36d6e) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x220200) 00:18:18 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x9, 0x80000) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) (async, rerun: 64) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r4, r5}}, 0x18) (async, rerun: 64) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r1, &(0x7f00000000c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000080), 0x0, {0xa, 0x4e24, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8}, r4}}, 0x38) (rerun: 64) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x4}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:18 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0xfffffffffffffffd, 0x569ef08b3dd36d6e) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x220200) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x8, 0x220200) 00:18:18 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000700)={0x6, 0x0, [{0x10000, 0x15, &(0x7f00000000c0)=""/21}, {0x1000, 0x55, &(0x7f0000000500)=""/85}, {0x4, 0x1000, &(0x7f0000001580)=""/4096}, {0x5000, 0x3c, &(0x7f0000000100)=""/60}, {0x2000, 0xb6, &(0x7f0000000580)=""/182}, {0x3000, 0x9b, &(0x7f0000000640)=""/155}]}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000a00)={0x18, 0xd, 0x1, {{0x10, 0x3, 0x2}}}, 0x18) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000880)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000840)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000008c0)={0x6, 0x118, 0xfa00, {{0x0, 0x3, "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", 0x6, 0xf, 0xd9, 0x8, 0xff, 0x6, 0x7f}, r4}}, 0x120) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:18 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x5}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:19 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) write$damon_init_regions(r1, &(0x7f0000000040)={{' ', r2}, {' ', 0x6}, {' ', 0x1}}, 0x3f) (async) write$damon_init_regions(r1, &(0x7f0000000040)={{' ', r2}, {' ', 0x6}, {' ', 0x1}}, 0x3f) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x4, 0x2, 0x7f, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000000c0)={r3}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:19 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0xf1c, 0x10000) (async) socket$inet(0x2, 0x6, 0x1f) 00:18:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 00:18:19 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0xffffffffffffffc9, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x804) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:19 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) 00:18:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) 00:18:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x6}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:19 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0xffffffffffffffc9, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x804) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) 00:18:19 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder0\x00'}) 00:18:19 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) 00:18:19 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0xf1c, 0x10000) (async) socket$inet(0x2, 0x6, 0x1f) 00:18:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) 00:18:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x7}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:19 executing program 2: r0 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000854}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0xffffffffffffffc9, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x804) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r2, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV4MASK={0xffffffffffffffc9, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x804) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:19 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder0\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder0\x00'}) (async) 00:18:19 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) 00:18:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) 00:18:19 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x9, 0x551a42) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x8000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x8) 00:18:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x9}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:19 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000580)={'custom0\x00'}) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r3, 0x0, 0x0, 0x1}}, 0x20) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:19 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x800, 0x70bd27, 0x4, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000014) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x84200) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000080)={0x0, 0x18, [0x40, 0x0, 0x1, 0x3, 0x70000, 0xc3b8]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x401) 00:18:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) (async) 00:18:19 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder0\x00'}) 00:18:19 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x9, 0x551a42) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x8000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x8) 00:18:19 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000580)={'custom0\x00'}) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r3, 0x0, 0x0, 0x1}}, 0x20) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x300}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:19 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x9, 0x551a42) syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x8000) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x8000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x8) 00:18:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x500}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x82c4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0xd5f, 0x96103) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x30d7, 0x7f, 0x2, r2, 0x2, '\x00', 0x0, r3, 0x1, 0x0, 0x4}, 0x48) read$smackfs_cipsonum(r1, &(0x7f0000000040), 0x14) prctl$PR_SVE_SET_VL(0x32, 0x1a518) 00:18:19 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000040)={'custom0\x00'}) 00:18:19 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async, rerun: 32) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000580)={'custom0\x00'}) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000000c0), r3, 0x0, 0x0, 0x1}}, 0x20) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0xb, 'veth1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0xa, 0x0, @fd=r2, 0x0, 0x0, 0x2, 0x9, 0x0, {0x0, 0x0, r0}}) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x364, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dd}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0xfff}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x364}, 0x1, 0x0, 0x0, 0x8000}, 0x44010) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000)) accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) 00:18:19 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x800, 0x70bd27, 0x4, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000014) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x84200) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000080)={0x0, 0x18, [0x40, 0x0, 0x1, 0x3, 0x70000, 0xc3b8]}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x401) 00:18:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x600}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:19 executing program 1: r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r0, 0x800, 0x70bd27, 0x4, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000840}, 0x20000014) (async, rerun: 64) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async, rerun: 64) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x84200) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000080)={0x0, 0x18, [0x40, 0x0, 0x1, 0x3, 0x70000, 0xc3b8]}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x401) 00:18:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x82c4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0xd5f, 0x96103) (rerun: 64) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x30d7, 0x7f, 0x2, r2, 0x2, '\x00', 0x0, r3, 0x1, 0x0, 0x4}, 0x48) (async, rerun: 32) read$smackfs_cipsonum(r1, &(0x7f0000000040), 0x14) (async, rerun: 32) prctl$PR_SVE_SET_VL(0x32, 0x1a518) 00:18:19 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000005c0)='rdma.max\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x333}}, 0x20) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0x8, "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", 0x81, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}, r4}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) 00:18:19 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000040)={'custom0\x00'}) 00:18:19 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0xb, 'veth1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0xa, 0x0, @fd=r2, 0x0, 0x0, 0x2, 0x9, 0x0, {0x0, 0x0, r0}}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0xa, 0x0, @fd=r2, 0x0, 0x0, 0x2, 0x9, 0x0, {0x0, 0x0, r0}}) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x364, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dd}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0xfff}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x364}, 0x1, 0x0, 0x0, 0x8000}, 0x44010) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000)) accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) 00:18:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x700}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:19 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000040)={'custom0\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000040)={'custom0\x00'}) (async) 00:18:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x82c4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0xd5f, 0x96103) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x30d7, 0x7f, 0x2, r2, 0x2, '\x00', 0x0, r3, 0x1, 0x0, 0x4}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x8, 0x30d7, 0x7f, 0x2, r2, 0x2, '\x00', 0x0, r3, 0x1, 0x0, 0x4}, 0x48) read$smackfs_cipsonum(r1, &(0x7f0000000040), 0x14) (async) read$smackfs_cipsonum(r1, &(0x7f0000000040), 0x14) prctl$PR_SVE_SET_VL(0x32, 0x1a518) 00:18:19 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) openat$cgroup_int(r1, &(0x7f00000005c0)='rdma.max\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x333}}, 0x20) (async, rerun: 32) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) (rerun: 32) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0x8, "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", 0x81, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}, r4}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) 00:18:19 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x3c5181) syz_open_dev$sndctrl(&(0x7f0000000000), 0xe00, 0x8000) 00:18:19 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) openat$cgroup_int(r1, &(0x7f00000005c0)='rdma.max\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500), 0x333}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000540)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000500)={0xffffffffffffffff}, 0x333}}, 0x20) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0x8, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x81, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}, r4}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) 00:18:19 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0xb, 'veth1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0xa, 0x0, @fd=r2, 0x0, 0x0, 0x2, 0x9, 0x0, {0x0, 0x0, r0}}) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000740)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000380)={0x364, r4, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dd}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x180, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8, 0x7, 0xfff}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r6}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x364}, 0x1, 0x0, 0x0, 0x8000}, 0x44010) (async) ioctl$SIOCX25GDTEFACILITIES(r1, 0x89ea, &(0x7f0000000000)) (async) accept$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, &(0x7f00000000c0)=0x10) 00:18:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x900}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:19 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x3c5181) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x3c5181) syz_open_dev$sndctrl(&(0x7f0000000000), 0xe00, 0x8000) 00:18:19 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f00000000c0)={0x6, 0x4, 0x0, 0x7f, 0x3, 0x0, 0x18, "cd779bd5657b62dca6097a499d64a0748faef749", "1e45ed7176200d162aa7ae48c810d1958a0f8376"}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) write$smackfs_cipso(r2, &(0x7f0000000500)={'/dev/input/mouse#\x00', 0x20, 0x9c, 0x20, 0x4, 0x20, [{0xb2}, {0x58}, {0x18}, {0xaa}]}, 0x92) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) 00:18:19 executing program 2: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) 00:18:19 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x3c5181) syz_open_dev$sndctrl(&(0x7f0000000000), 0xe00, 0x8000) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x3c5181) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0xe00, 0x8000) (async) 00:18:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {0x24, 0x0, 0x4000}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000010c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000000400)={0xc44, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x55}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x933b}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x9, 0x0, 0xffff}, {0x2, 0x0, 0x6, 0x7}, {0x79bf, 0x1f, 0x40, 0x40}, {0x40, 0x5, 0x5, 0x7fffffff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x114, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0xf9, 0x3, 0x3}, {0x3, 0x8, 0x2, 0x80}, {0x1, 0x9, 0x5, 0x7}, {0x4, 0x1, 0x4, 0x10000}, {0x4, 0x4, 0x20, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1dca41d2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x40, 0x9, 0x7fff}, {0x8, 0x1, 0x0, 0x344}, {0x80b7, 0x6, 0x7, 0x957}]}}}]}}]}, 0xc44}, 0x1, 0x0, 0x0, 0x4004001}, 0x4048010) 00:18:19 executing program 2: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) (async) 00:18:19 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) 00:18:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000010c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000000400)={0xc44, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x55}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x933b}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x9, 0x0, 0xffff}, {0x2, 0x0, 0x6, 0x7}, {0x79bf, 0x1f, 0x40, 0x40}, {0x40, 0x5, 0x5, 0x7fffffff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x114, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0xf9, 0x3, 0x3}, {0x3, 0x8, 0x2, 0x80}, {0x1, 0x9, 0x5, 0x7}, {0x4, 0x1, 0x4, 0x10000}, {0x4, 0x4, 0x20, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1dca41d2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x40, 0x9, 0x7fff}, {0x8, 0x1, 0x0, 0x344}, {0x80b7, 0x6, 0x7, 0x957}]}}}]}}]}, 0xc44}, 0x1, 0x0, 0x0, 0x4004001}, 0x4048010) 00:18:19 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f00000000c0)={0x6, 0x4, 0x0, 0x7f, 0x3, 0x0, 0x18, "cd779bd5657b62dca6097a499d64a0748faef749", "1e45ed7176200d162aa7ae48c810d1958a0f8376"}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) write$smackfs_cipso(r2, &(0x7f0000000500)={'/dev/input/mouse#\x00', 0x20, 0x9c, 0x20, 0x4, 0x20, [{0xb2}, {0x58}, {0x18}, {0xaa}]}, 0x92) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f00000000c0)={0x6, 0x4, 0x0, 0x7f, 0x3, 0x0, 0x18, "cd779bd5657b62dca6097a499d64a0748faef749", "1e45ed7176200d162aa7ae48c810d1958a0f8376"}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) write$smackfs_cipso(r2, &(0x7f0000000500)={'/dev/input/mouse#\x00', 0x20, 0x9c, 0x20, 0x4, 0x20, [{0xb2}, {0x58}, {0x18}, {0xaa}]}, 0x92) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:19 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000100)) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000d00)={&(0x7f0000000280), 0xc, &(0x7f0000000cc0)={&(0x7f0000000440)={0x7b4, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2c53}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7d67}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x615}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0xf4, 0xe6, 0x1}, {0x3, 0x3, 0x84, 0x9}, {0xcb40, 0x0, 0x81, 0xed4}, {0x0, 0x1f, 0x40, 0x7f}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x14804) 00:18:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0x4, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:19 executing program 2: ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) 00:18:19 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) 00:18:19 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000010c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001080)={&(0x7f0000000400)={0xc44, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x220, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x55}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x933b}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1, 0x9, 0x0, 0xffff}, {0x2, 0x0, 0x6, 0x7}, {0x79bf, 0x1f, 0x40, 0x40}, {0x40, 0x5, 0x5, 0x7fffffff}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8, 0x6, r4}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x114, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0xf9, 0x3, 0x3}, {0x3, 0x8, 0x2, 0x80}, {0x1, 0x9, 0x5, 0x7}, {0x4, 0x1, 0x4, 0x10000}, {0x4, 0x4, 0x20, 0x8}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r6}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1dca41d2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}, {0x8}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x40, 0x9, 0x7fff}, {0x8, 0x1, 0x0, 0x344}, {0x80b7, 0x6, 0x7, 0x957}]}}}]}}]}, 0xc44}, 0x1, 0x0, 0x0, 0x4004001}, 0x4048010) 00:18:19 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f00000000c0)={0x6, 0x4, 0x0, 0x7f, 0x3, 0x0, 0x18, "cd779bd5657b62dca6097a499d64a0748faef749", "1e45ed7176200d162aa7ae48c810d1958a0f8376"}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) write$smackfs_cipso(r2, &(0x7f0000000500)={'/dev/input/mouse#\x00', 0x20, 0x9c, 0x20, 0x4, 0x20, [{0xb2}, {0x58}, {0x18}, {0xaa}]}, 0x92) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SIOCX25SDTEFACILITIES(r1, 0x89eb, &(0x7f00000000c0)={0x6, 0x4, 0x0, 0x7f, 0x3, 0x0, 0x18, "cd779bd5657b62dca6097a499d64a0748faef749", "1e45ed7176200d162aa7ae48c810d1958a0f8376"}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) write$smackfs_cipso(r2, &(0x7f0000000500)={'/dev/input/mouse#\x00', 0x20, 0x9c, 0x20, 0x4, 0x20, [{0xb2}, {0x58}, {0x18}, {0xaa}]}, 0x92) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:19 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x10000) 00:18:19 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0x5, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:20 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='pids.max\x00', 0x2, 0x0) 00:18:20 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000100)) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000d00)={&(0x7f0000000280), 0xc, &(0x7f0000000cc0)={&(0x7f0000000440)={0x7b4, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2c53}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7d67}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x615}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0xf4, 0xe6, 0x1}, {0x3, 0x3, 0x84, 0x9}, {0xcb40, 0x0, 0x81, 0xed4}, {0x0, 0x1f, 0x40, 0x7f}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x14804) openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x1}) (async) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000100)) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0), &(0x7f0000000400)=0x4) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000d00)={&(0x7f0000000280), 0xc, &(0x7f0000000cc0)={&(0x7f0000000440)={0x7b4, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2c53}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7d67}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x615}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0xf4, 0xe6, 0x1}, {0x3, 0x3, 0x84, 0x9}, {0xcb40, 0x0, 0x81, 0xed4}, {0x0, 0x1f, 0x40, 0x7f}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x14804) (async) 00:18:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x10000) [ 1100.115794][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 00:18:20 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) 00:18:20 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x6, {0x1, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xc, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:20 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) 00:18:20 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x6, {0x1, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x10000) (async) 00:18:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x2, 'wpan3\x00'}]}, 0x20}}, 0x0) [ 1100.262434][ T7341] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 00:18:20 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x6, {0x1, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x6, {0x1, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:20 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x1}) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000100)) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x4) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000d00)={&(0x7f0000000280), 0xc, &(0x7f0000000cc0)={&(0x7f0000000440)={0x7b4, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0x4}}, {{0x8, 0x1, r4}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2c53}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r5}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7d67}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x615}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x5, 0xf4, 0xe6, 0x1}, {0x3, 0x3, 0x84, 0x9}, {0xcb40, 0x0, 0x81, 0xed4}, {0x0, 0x1f, 0x40, 0x7f}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x7b4}, 0x1, 0x0, 0x0, 0x20000080}, 0x14804) 00:18:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0x4000000000000000, 0x4480) 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x5, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:20 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_PTRACER(0x59616d61, r0) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r0, 0x12) (async) 00:18:20 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) [ 1100.417168][ T7352] netlink: 'syz-executor.3': attribute type 5 has an invalid length. 00:18:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x7, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0x4000000000000000, 0x4480) 00:18:20 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) [ 1100.480831][ T7364] netlink: 'syz-executor.3': attribute type 7 has an invalid length. 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x8, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:20 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0x4000000000000000, 0x4480) syz_open_dev$sndctrl(&(0x7f0000000000), 0x4000000000000000, 0x4480) (async) [ 1100.561491][ T7379] netlink: 'syz-executor.3': attribute type 8 has an invalid length. 00:18:20 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x2, 0x394abffdf09e576) write$9p(r2, &(0x7f00000002c0)="61ed20aef6724b32865d7b961b397db6826f4cd8781278674f83ac9b7a63199825c9d2bec417dcc15cf82b9fafb5d87be6b1c62c95e8a1e8094edad3347563cb4622fb0777", 0x45) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_io_uring_setup(0x2767, &(0x7f0000000040)={0x0, 0x7647, 0x20, 0x1, 0x37f, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000100)) 00:18:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:20 executing program 1: write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x31, 0x37, 0x1, {0x0, 0x100000001, 0x8001, 0xffffffffffffffff, 0x13, '/dev/snd/controlC#\x00'}}, 0x31) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80081210}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x800, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xf7ffffff, 0xb, 0x23}) 00:18:20 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async, rerun: 32) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async, rerun: 64) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (rerun: 64) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x106}}, 0x20) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x24, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:20 executing program 2: ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000200), 0xffffffffffff8000, 0xe1c37572297d84a) 00:18:20 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x2, 0x394abffdf09e576) write$9p(r2, &(0x7f00000002c0)="61ed20aef6724b32865d7b961b397db6826f4cd8781278674f83ac9b7a63199825c9d2bec417dcc15cf82b9fafb5d87be6b1c62c95e8a1e8094edad3347563cb4622fb0777", 0x45) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_io_uring_setup(0x2767, &(0x7f0000000040)={0x0, 0x7647, 0x20, 0x1, 0x37f, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_io_uring_setup(0x2767, &(0x7f0000000040)={0x0, 0x7647, 0x20, 0x1, 0x37f, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000100)) 00:18:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) [ 1100.626234][ T7391] netlink: 'syz-executor.3': attribute type 36 has an invalid length. 00:18:20 executing program 1: write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x31, 0x37, 0x1, {0x0, 0x100000001, 0x8001, 0xffffffffffffffff, 0x13, '/dev/snd/controlC#\x00'}}, 0x31) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80081210}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}}, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x800, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xf7ffffff, 0xb, 0x23}) 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x38, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:20 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x4000, 0x600a00) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000500)=0x200000000) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00'}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:20 executing program 2: ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000200), 0xffffffffffff8000, 0xe1c37572297d84a) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0xffffffffffff8000, 0xe1c37572297d84a) 00:18:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x4, 0x10001, 0x1000, r1, 0x4, '\x00', r2, r3, 0x1, 0x2, 0x3, 0xd}, 0x48) 00:18:20 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x2, 0x394abffdf09e576) write$9p(r2, &(0x7f00000002c0)="61ed20aef6724b32865d7b961b397db6826f4cd8781278674f83ac9b7a63199825c9d2bec417dcc15cf82b9fafb5d87be6b1c62c95e8a1e8094edad3347563cb4622fb0777", 0x45) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_io_uring_setup(0x2767, &(0x7f0000000040)={0x0, 0x7647, 0x20, 0x1, 0x37f, 0x0, r1}, &(0x7f00000000c0), &(0x7f0000000100)) 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x10}}, 0x0) 00:18:20 executing program 1: write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000080)={0x31, 0x37, 0x1, {0x0, 0x100000001, 0x8001, 0xffffffffffffffff, 0x13, '/dev/snd/controlC#\x00'}}, 0x31) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80081210}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x38}}, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x800, 0x8000) (async) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x800, 0x8000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0xf7ffffff, 0xb, 0x23}) 00:18:20 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x4000, 0x600a00) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000500)=0x200000000) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00'}) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:20 executing program 2: ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000000)) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0xffffffffffff8000, 0xe1c37572297d84a) 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x14}}, 0x0) 00:18:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x4, 0x10001, 0x1000, r1, 0x4, '\x00', r2, r3, 0x1, 0x2, 0x3, 0xd}, 0x48) 00:18:20 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) write$9p(r0, &(0x7f00000002c0)="9c68ae54ef911514a61a582b9ba3d7c951f7bbd5729cca33784d83719a775cfd378a3c56058bafc525921808bbcc17694ea6b3e0cc7db39099f4d2db9148a466e5f2d5865ad5de862efb69779b438417f938e45836a701fe54040ae9e864cd1cbc96ec02276482386af2622e5746d8d641792f7578d16fb876e7f1374c888406bab4b1ac1c722f6153ead9a6d3e697d335cf4e9cc2c56013850f148132a45e833e46d635d4b11cbe86b606cca8dd2477396f8c7f7ddf10bcc8c987dc7be1416df5484d4b9350bbf1a5abf692592426c2db07e7ef83d121a7997809aca3fbf4aba9f888c3523da06320eea8bf8830c2bfc5", 0xf1) read$smackfs_cipsonum(0xffffffffffffffff, &(0x7f00000003c0), 0x14) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x5452, &(0x7f0000000140)={'binder1\x00'}) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x200}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x3}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x40040) 00:18:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4010) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) r2 = socket$inet(0x2, 0x6, 0x200) r3 = syz_open_dev$mouse(&(0x7f00000004c0), 0x400000000, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r6, r7}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r6}}, 0x18) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in6=@loopback, 0x4e23, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x33, 0x0, 0xee00}, {0xacf2, 0xff, 0x20f4, 0x10000, 0x9, 0xffd, 0x10000, 0x4}, {0x100, 0x10000, 0x7, 0x7fff}, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010101, 0x3505, 0x0, 0x1, 0x4, 0x6, 0x80000000, 0x7fffffff}}, 0xe8) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0xc02, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_open_dev$mouse(&(0x7f00000001c0), 0x3, 0x8040) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000240)=ANY=[@ANYBLOB="ff00000006000000070000000700000000000000"]) 00:18:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1000) 00:18:20 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x4000, 0x600a00) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000500)=0x200000000) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r3, 0x89f0, &(0x7f00000000c0)={'ip_vti0\x00'}) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:20 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x4, 0x10001, 0x1000, r1, 0x4, '\x00', r2, r3, 0x1, 0x2, 0x3, 0xd}, 0x48) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x4, 0x10001, 0x1000, r1, 0x4, '\x00', r2, r3, 0x1, 0x2, 0x3, 0xd}, 0x48) (async) 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x24}}, 0x0) 00:18:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async, rerun: 32) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1000) 00:18:20 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) write$9p(r0, &(0x7f00000002c0)="9c68ae54ef911514a61a582b9ba3d7c951f7bbd5729cca33784d83719a775cfd378a3c56058bafc525921808bbcc17694ea6b3e0cc7db39099f4d2db9148a466e5f2d5865ad5de862efb69779b438417f938e45836a701fe54040ae9e864cd1cbc96ec02276482386af2622e5746d8d641792f7578d16fb876e7f1374c888406bab4b1ac1c722f6153ead9a6d3e697d335cf4e9cc2c56013850f148132a45e833e46d635d4b11cbe86b606cca8dd2477396f8c7f7ddf10bcc8c987dc7be1416df5484d4b9350bbf1a5abf692592426c2db07e7ef83d121a7997809aca3fbf4aba9f888c3523da06320eea8bf8830c2bfc5", 0xf1) (async, rerun: 64) read$smackfs_cipsonum(0xffffffffffffffff, &(0x7f00000003c0), 0x14) (rerun: 64) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x5452, &(0x7f0000000140)={'binder1\x00'}) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x200}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x3}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x40040) 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x140}}, 0x0) 00:18:20 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4010) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) r2 = socket$inet(0x2, 0x6, 0x200) r3 = syz_open_dev$mouse(&(0x7f00000004c0), 0x400000000, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r6, r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r6, r7}}, 0x18) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r6}}, 0x18) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in6=@loopback, 0x4e23, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x33, 0x0, 0xee00}, {0xacf2, 0xff, 0x20f4, 0x10000, 0x9, 0xffd, 0x10000, 0x4}, {0x100, 0x10000, 0x7, 0x7fff}, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010101, 0x3505, 0x0, 0x1, 0x4, 0x6, 0x80000000, 0x7fffffff}}, 0xe8) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in6=@loopback, 0x4e23, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x33, 0x0, 0xee00}, {0xacf2, 0xff, 0x20f4, 0x10000, 0x9, 0xffd, 0x10000, 0x4}, {0x100, 0x10000, 0x7, 0x7fff}, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010101, 0x3505, 0x0, 0x1, 0x4, 0x6, 0x80000000, 0x7fffffff}}, 0xe8) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0xc02, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$mouse(&(0x7f00000001c0), 0x3, 0x8040) (async) r8 = syz_open_dev$mouse(&(0x7f00000001c0), 0x3, 0x8040) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000240)=ANY=[@ANYBLOB="ff00000006000000070000000700000000000000"]) 00:18:20 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) write$9p(r0, &(0x7f00000002c0)="9c68ae54ef911514a61a582b9ba3d7c951f7bbd5729cca33784d83719a775cfd378a3c56058bafc525921808bbcc17694ea6b3e0cc7db39099f4d2db9148a466e5f2d5865ad5de862efb69779b438417f938e45836a701fe54040ae9e864cd1cbc96ec02276482386af2622e5746d8d641792f7578d16fb876e7f1374c888406bab4b1ac1c722f6153ead9a6d3e697d335cf4e9cc2c56013850f148132a45e833e46d635d4b11cbe86b606cca8dd2477396f8c7f7ddf10bcc8c987dc7be1416df5484d4b9350bbf1a5abf692592426c2db07e7ef83d121a7997809aca3fbf4aba9f888c3523da06320eea8bf8830c2bfc5", 0xf1) (async, rerun: 64) read$smackfs_cipsonum(0xffffffffffffffff, &(0x7f00000003c0), 0x14) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x200}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x3}, @IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x40040) 00:18:20 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) 00:18:20 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r6, 0x0, 0x1, 0x4}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r5, r7}}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0x7, "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", 0x1, 0x3, 0x2, 0x2, 0x1, 0x7, 0x7f, 0x3}, r5}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0xec0}}, 0x0) 00:18:20 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) (rerun: 32) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) 00:18:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x33fe0}}, 0x0) 00:18:20 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:20 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x8c, r1, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x1f}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000800}, 0x1000) 00:18:20 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async, rerun: 64) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r6, 0x0, 0x1, 0x4}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r5, r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0x7, "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", 0x1, 0x3, 0x2, 0x2, 0x1, 0x7, 0x7f, 0x3}, r5}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (rerun: 64) 00:18:21 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x80, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'geneve0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:usbtty_device_t:s0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000040}, 0x4010) (async) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4}, 0xc) r2 = socket$inet(0x2, 0x6, 0x200) (async) r3 = syz_open_dev$mouse(&(0x7f00000004c0), 0x400000000, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) (async, rerun: 32) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r6, r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r3, &(0x7f0000000480)={0x5, 0x10, 0xfa00, {&(0x7f0000000280), r6}}, 0x18) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@local, @in6=@loopback, 0x4e23, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x33, 0x0, 0xee00}, {0xacf2, 0xff, 0x20f4, 0x10000, 0x9, 0xffd, 0x10000, 0x4}, {0x100, 0x10000, 0x7, 0x7fff}, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in6=@local, 0x4d3, 0xff}, 0xa, @in=@rand_addr=0x64010101, 0x3505, 0x0, 0x1, 0x4, 0x6, 0x80000000, 0x7fffffff}}, 0xe8) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (rerun: 32) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0xc02, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = syz_open_dev$mouse(&(0x7f00000001c0), 0x3, 0x8040) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r8, 0xc008551b, &(0x7f0000000240)=ANY=[@ANYBLOB="ff00000006000000070000000700000000000000"]) 00:18:21 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:21 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0xf}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000180)={0xb, 0x10, 0xfa00, {&(0x7f0000000040), r1}}, 0x18) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) 00:18:21 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x10000) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000000)) 00:18:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0xfffffdef}}, 0x0) 00:18:21 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:21 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x10000) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000000)) 00:18:21 executing program 4: ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000040)={0x0, 0xae, ""/174}) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x1000000000000}}, 0x0) 00:18:21 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@null, 0x3, 'pimreg\x00'}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:21 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000500)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180), r6, 0x0, 0x1, 0x4}}, 0x20) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r5, r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0x7, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611bd8fadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aea07a7e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x3, 0x2, 0x2, 0x1, 0x7, 0x7f, 0x3}, r5}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:21 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x4ea, 0x20e842) 00:18:21 executing program 4: ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000040)={0x0, 0xae, ""/174}) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:21 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x10000) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000000)) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2, 0x10000) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(0xffffffffffffffff, 0x8004af79, &(0x7f0000000000)) (async) 00:18:21 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) (async) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@null, 0x3, 'pimreg\x00'}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x2}, 0x0) 00:18:21 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa, 0x4e21, 0x8, @loopback, 0x4}}}, 0x38) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:21 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x4ea, 0x20e842) syz_open_dev$sndctrl(&(0x7f0000000200), 0x4ea, 0x20e842) (async) 00:18:21 executing program 4: ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, &(0x7f0000000040)={0x0, 0xae, ""/174}) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:21 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x8, 0xf3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r0}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) 00:18:21 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000040)={@null, 0x3, 'pimreg\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:21 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa, 0x4e21, 0x8, @loopback, 0x4}}}, 0x38) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x5}, 0x0) 00:18:21 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x8, 0xf3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r0}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x8, 0xf3}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r0}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) (async) 00:18:21 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000000c0)={0x0, 0x7}) 00:18:21 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x4ea, 0x20e842) syz_open_dev$sndctrl(&(0x7f0000000200), 0x4ea, 0x20e842) (async) 00:18:21 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa, 0x4e21, 0x8, @loopback, 0x4}}}, 0x38) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000100)={0x10, 0x30, 0xfa00, {&(0x7f00000000c0), 0x0, {0xa, 0x4e21, 0x8, @loopback, 0x4}}}, 0x38) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:21 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f0000000040)) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x7}, 0x0) 00:18:21 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000000)={0x9, 0x8, 0xf3, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000040)={r0}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) 00:18:21 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x800, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000000c0)={0x0, 0x7}) 00:18:21 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000001, 0x30080) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x3, 0x8, [0xffff, 0x9]}) 00:18:21 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000006c0)={'custom1\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000002c0)=0x1, 0x4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00'}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1000800, 0xc1) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000640)={@dev, @local}, &(0x7f0000000680)=0x8) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0x4, 0x20000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r6, r7}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r6, 0x30, 0x1, @ib={0x1b, 0x100, 0x4, {"963e28f58120a459d81db14ef28b6486"}, 0x7, 0x8000000000000001, 0x4}}}, 0xa0) 00:18:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x8}, 0x0) 00:18:21 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f0000000040)) (async) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f0000000040)) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x3) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x44041) syz_open_dev$sndctrl(&(0x7f0000000140), 0x7, 0x84000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff0f210d6925000009e8ac3b8bb858304e80fd7ac46485aa"]) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@dev, @dev}, &(0x7f0000000100)=0x8) 00:18:21 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x23, 0xf, &(0x7f0000000040)) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000000c0)={0x0, 0x7}) 00:18:21 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000001, 0x30080) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x3, 0x8, [0xffff, 0x9]}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000001, 0x30080) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x3, 0x8, [0xffff, 0x9]}) (async) 00:18:21 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000006c0)={'custom1\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async, rerun: 32) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (rerun: 32) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000002c0)=0x1, 0x4) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00'}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1000800, 0xc1) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000640)={@dev, @local}, &(0x7f0000000680)=0x8) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000340), 0x4, 0x20000) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r6, r7}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r6, 0x30, 0x1, @ib={0x1b, 0x100, 0x4, {"963e28f58120a459d81db14ef28b6486"}, 0x7, 0x8000000000000001, 0x4}}}, 0xa0) 00:18:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x24}, 0x0) 00:18:21 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(0xffffffffffffffff, 0x8004af7a, &(0x7f0000000040)) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x3) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x44041) syz_open_dev$sndctrl(&(0x7f0000000140), 0x7, 0x84000) (async) syz_open_dev$sndctrl(&(0x7f0000000140), 0x7, 0x84000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff0f210d6925000009e8ac3b8bb858304e80fd7ac46485aa"]) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@dev, @dev}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@dev, @dev}, &(0x7f0000000100)=0x8) 00:18:21 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x4af2, &(0x7f00000001c0)={0x0, 0xdaab, 0x10, 0x3, 0xf9, 0x0, r2}, &(0x7f0000000240), &(0x7f0000000280)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'custom1\x00'}) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:21 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000001, 0x30080) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x3, 0x8, [0xffff, 0x9]}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000001, 0x30080) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x3, 0x8, [0xffff, 0x9]}) (async) 00:18:21 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000006c0)={'custom1\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f00000002c0)=0x1, 0x4) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00'}, 0x18) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) r4 = syz_open_dev$mouse(&(0x7f00000000c0), 0x1000800, 0xc1) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000640)={@dev, @local}, &(0x7f0000000680)=0x8) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000340), 0x4, 0x20000) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r6, r7}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000280)) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r4, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, r6, 0x30, 0x1, @ib={0x1b, 0x100, 0x4, {"963e28f58120a459d81db14ef28b6486"}, 0x7, 0x8000000000000001, 0x4}}}, 0xa0) 00:18:21 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'custom0\x00'}) 00:18:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x38}, 0x0) 00:18:21 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000080)=0x3) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x44041) syz_open_dev$sndctrl(&(0x7f0000000140), 0x7, 0x84000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff0f210d6925000009e8ac3b8bb858304e80fd7ac46485aa"]) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff0f210d6925000009e8ac3b8bb858304e80fd7ac46485aa"]) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@dev, @dev}, &(0x7f0000000100)=0x8) (async) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000040)={@dev, @dev}, &(0x7f0000000100)=0x8) 00:18:21 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x4af2, &(0x7f00000001c0)={0x0, 0xdaab, 0x10, 0x3, 0xf9, 0x0, r2}, &(0x7f0000000240), &(0x7f0000000280)) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (rerun: 32) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'custom1\x00'}) (async, rerun: 64) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (rerun: 64) 00:18:21 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) 00:18:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x2}, 0x0) 00:18:21 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x514, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x9}}}, 0x30) 00:18:21 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'custom0\x00'}) 00:18:21 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) 00:18:21 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) write$smackfs_cipsonum(r0, &(0x7f0000000100)=0x9, 0x14) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000080)={0x3, 0xfffffffc}) r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) read$smackfs_cipsonum(r2, &(0x7f00000001c0), 0x14) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000040)=0x8) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0x121000) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, &(0x7f0000000300)=ANY=[@ANYBLOB="000000080000feffffffffffe4ff0000743c11ce64a7317900000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a21be3b3439cf0f49daafc44f43bf96399ace97363e2bc34269ec90730a6657ea255c22000000000000000000"]) 00:18:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x3}, 0x0) 00:18:21 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'custom0\x00'}) 00:18:21 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x514, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x9}}}, 0x30) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x514, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x9}}}, 0x30) (async) 00:18:21 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) 00:18:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x4}, 0x0) 00:18:21 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x0) syz_io_uring_setup(0x4af2, &(0x7f00000001c0)={0x0, 0xdaab, 0x10, 0x3, 0xf9, 0x0, r2}, &(0x7f0000000240), &(0x7f0000000280)) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'custom1\x00'}) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x0) (async) syz_io_uring_setup(0x4af2, &(0x7f00000001c0)={0x0, 0xdaab, 0x10, 0x3, 0xf9, 0x0, r2}, &(0x7f0000000240), &(0x7f0000000280)) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000040)={'custom1\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) 00:18:21 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) write$smackfs_cipsonum(r0, &(0x7f0000000100)=0x9, 0x14) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000080)={0x3, 0xfffffffc}) r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) read$smackfs_cipsonum(r2, &(0x7f00000001c0), 0x14) (async) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000040)=0x8) (async) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0x121000) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, &(0x7f0000000300)=ANY=[@ANYBLOB="000000080000feffffffffffe4ff0000743c11ce64a7317900000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a21be3b3439cf0f49daafc44f43bf96399ace97363e2bc34269ec90730a6657ea255c22000000000000000000"]) 00:18:21 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x514, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x9}}}, 0x30) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_BIND_IP(r3, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x514, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x9}}}, 0x30) (async) 00:18:21 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f00000013c0)={0x1, 0x6}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x5, 0x2007, @fd_index=0x8, 0x7, &(0x7f00000000c0)=[{&(0x7f0000000280)="958e8dd4a725c75139a2582b7e59f099f4eae3663d1196863fe9d87af71485f87353e15ec99e56f5d167c9e0d1d2ca2a3435a0ca1dab866e3147b2789d05c96f6634c7e6912cb7bb763361c6b945addb7b93f0b6c4387643a202982ae6624a305fc2f4b1a8e779d49ae41245587880d93cc3a6403c29239212887fcd992c7ea0c6a9a0d965dc0fdd4c4fa4e84714c92448b23f5ab21e7cbaf28438897ee6e99d30c45ff2a2a753493f5874b94b13ff7520e73d0bce229f6388317588fe46f4c37bf86369c6648538c84f008a4df5ccf7051d7406b1dbaf3e876142b1d1fe84f6ecf0e58ce3a4d3e1e97ffdfc6fca0fccedfed213bdfaa16037e9627a4f813382e257def87b3bf714939456911b0a401e715763a6f42bca5cf3cf4be06355e8c9310cde50f5e133d644a6be9b0421ff7bca320963f45f674ee946029b8287d30111b2fdcca1c39a5277c47a2dad85ea3d531ca0e543a132ed9b525be30417b17d948232e5e970d6b7f013e741ce4a86943f23c5527211f7b9998230f96b0688d7c850f1ba5ada728a7a2bfd7a30a355fea31c99f1ce1e2d3c7b956e64a0f91a2f0dce210f4c4f03c515db563587fcf597f3522a1d49338d0066f6541bc0f2ef8d56f7e9a1f016e1f1898621d2e7256a1e4ae4477dfa0a181ddf320ea57a11c4708f39bf908167037ce3bfe2abc08e8af5c936246d9028151b1d7d5c0ac18a23e435c04fedde69cd9c294b13e0d0983fe729c748cb0a4fd04351ead619971a1c43ea0e2b6c320aeb3d41b21874c76afefcfa86325baeb452f55effa2c44c0c012c7c2140f51224e02ffc721ebe0f612b368b53c54aefcbc5b4207e8046af302780cce0f1480b0bf26b8ff47eda3cf4b1a56877e870f680f616a0c88ddf565443fae720818ef0c907c820636202cb3630bc0d681b0f66e049a3d22da39b7ffa12bc326a022b1d85daa370dc5b27aa4ed495c2fe85e547c393a6c8ae063c97d12d5459e804d205c30727e4793cad9340cb2c50fc3726cb13a9f3790854bafe65c530c8eabead5a09e7646d841b56ba44350d23ce9372aefd22f5011b496092a92cbaba2829c715e47254749236a71dc1ff43cb73cc1d0f7dcc55cd9ed31126c55cbbdf8d310e30908898935274240f631122605f14dd47e148739e8363ea724b61ebeddf1315ff82963c745bfc118f5cd9ef2a4e34fdf0b38418185eec6d3f43e40e8d694b4085e7df5849760f9c50ef4e98d73087e573d568e63adbd4e13025bee3b247c8dd5129563bbc5f64920155cf0d2cf08476ee5817f10f23ffe5899f38426e0a34bcd30033c0684d5b50206a3766d8d25046cc507375f5cbbf5f3f5bcb6917f5e36f551e7a83b9afefd5871e656d781e3b77e4fc7ca1aa1573a8b31b18937d42b791003d9d241f7782845d5464694d61db8dcc874563fadce8bc4fd47443dc44dde0c1b2c338d15750d05d8740200de44673faa2e4d94bc8adf6990d4e553bb515bc34f16e55dcee71ba3791e3a6a0270a2b1848ad67cba1f7ef36d3d4a05b1ff096454a5e2b33802f2379fd412a22124da33e159eb3b9d165be9cb2410fb07a3b1366be50ad632c3ebd067f2a0ed5d5355690552a31422090a7b66d3238a6039cbaef5f12a998534f9b4c2f22b96ae4a27691a41fb43b5f23b19e03824c2e6de6969acf8713632de10e47b4d5c3953455248798b5533fe8930a8047ea0346c91a5b52bebb036973a6fc54f00134e10066d9ef4b341b4c468f4529ca184d8df9ad2b40ebc49d040c173edfe4d726fb98511e7249e17051c313027e701096d3508df912a62ab53f5503920a246a3741612925a454588be6d793e8a28bdc9a0811b74b3602cac9528876403765399f5272dbe0d0dde5e85e30a97020fcc2ab915ed5653400ad1bece7f7b2346be1f76fef929f9368405f477ce1c2cda6b8fb524bd96387b06a1245f079837f9bf60d837d984b9033141d4c363e6583633a0a9b07e465e618eebd83b7449f0ac88f9398bbe1e39b38d2b02dfb3dc2e7ad1a0f997df9a2f927e0940f3771b20e78f2ac9a636ad74a1ee7a072509b20512bc2622de174db0b66f0feca4f84e4f9cfe0c233ceae8e31baa5f6de3e55d72113d3b37ba9ddb7034587f17ab1d9909bf9d7443e12709b8458ddd3c003f2a0dd172746313055241ea50a49bdad13346cb6d6e96924965a4a861c2081ffb543eed68d812c24d17e431ed8123bd5ac1a0608f854b943889b47b3a374dec530295c50f8b7e10904dc1d6e010460e1b506c584660f0d6deba1ed7a64a7f7d5a34787a8afbd3c4dd0535157a011b6974c3f490ec6c5df98bfd4066c8ab5dbf2e71290cef131c29839cc3dff88f00cbef175f6660ada32a632fdad9480ba5e7ba77b73de69ebb38851272ef96405315d1fb7bf28d83c21e72138b797db9a6575f50d654f88a327d676d1959acc4accb00ea2a07c399838623705313598331e5bf63a512c0886c6cf889eee43633d4a2ed9a20643cc3e971e1f6f5c22fac2509d6278931d4506b225a90a6a0b6c4101a1113955b3dbbd7a8655dcbcd3f94a3150b7947c57b91db2847fe9190589859328fb0a33ef0a6e8292fec0ca783a2459ca1bd5e51f55864e676fc9870c50a881f5040f0e3376f44f33277725fede53c773e33477d61b39609b66fe481830a3fdfb67ad6bf1dff01f667274a8aae286e94a80efca25a9cfd797e3f6d6d135dd3d51331e77ca6e43a49e7909aa22e8e621b52f1272b8129b39070c67fe5aaf6ca1562ddbe754d6d8db4527e58f6f58ab82121fec5d77232a88fb4aa9e922a9208adef875a95c5c0b20bf210704aab818810a159105da86d49f1cc71e1d1ff21beb63fa0103e1c0a042a7b324d6c0f4903987f0c14f205366bb91c019973cb609fac15070f086cadf6a1cfcf32952abde919cc263641815089eef616043add2c49ab635b1645c1aedec6112b1a3befc68c3e9ff1c1d07a28617604a01065269b4d6325bb7cfbd649498be02f32164e011ab7496e226367aa725a558461d30489b00dba750ea4dbf845ef7f5b1846439b1a2b23e5683f9730b15f0e5b69381bc1e5c956587f7c37a621360322ba97a4613a36e7b8f6f7082504da97a9677ab2748c7d6bcf497d8c8200824a8f9e16202a741449eb58396111225ac99793c2f810f43cf5268fb243d03c347cf501573d7851371f189449b8e1fa35a8b5e078d9ac5d673800cf80fb5b87ad11a75b29dda519692de6de06ccd732993cfe21e3ac625ee583fb0e9285c744ddcc978b073d71b7ef0cfb6bf7829f1b6e0ee928ef59c788fa03e62df9db04e6ad6f49296dbe0f01f91f187de6ce3e0bd74ff00f406fb46969d8b0560ea453aa437d0a6230015ba5238aaeed414c316b941c96dff8da5e1b2bdadeb9502f3f42d7a81141a167a79ecb87023a8a46b7208dee00eb60ee9cdd99ebd72458e67f59e13b0af2ecda615e9786b4aa74d49c8c98329b937fa22c709a87d8ac3e564d2837520a09555ffeebbab0b34cbb21228bb6f23f1121105ffa2a9f109a662873179982042231fb56a5ac4be1c8ea4f3149aa73da5214b5115d646906953b2df32bd1d633580ef74bc7b0586f2c40babefc0863918d0620a7ba8c46ec5c2b645a8b950795e5177e549380d459c280d52e4709785b39a5a9361fa776578131c834ab1d7e8f23c470d1e83a432443d6672506b32f412b289f7cb541992f4689e0c25887099d5c1e99734ce875edb25b35001cc645068e3da0a0f7ba3a99b759ff42d33b535f2bfab6b377e75201203ab0a92e48fdbc5c2edda15302169d47fc29157d41b8f83cdb377adb6d9bada7ae8147f56e815b70298827c48442f3a080be1e187cc774a1e170bcd3ca08aa4c03d8d8977dcbc3dd0ddf100ca63fcf5818a37701fb120a8554cc3a8b2e10075021a6e9c215e4fb4c3e03e12ffbf4bb5df08060774cdd2e720675ff48451d600d9d6022cdc38b4dbe1a7383c9337fa1dca8d2bb31469801a7ad2094cc04679f25bd4c96a5453c9b58dd28629188a7540c06510162c3fe79b2672dfa7d3eb00a914a13b27a43c36ef80d70ce49103b02b53f31fec2285a8a7af8ddb8d5e32877361351235b95753b710880e858d0d37480382289dde96dc01dbbaf689ff4b5a69139f91aa0e2147c3e85c23fad7bdd700b0b4fa7569d82271a1a2ddf9a621a8484163a34fccd31b848ac9fa0e4b41de1bc4c023b9b7268f39b71752d4b4f233044fcb229a23503a76d8c3f8bd8bea8c20a6b432bb04f8f0d7544b57ddb83b86a49aecfd3f4e00c0d7b63f199d476f5346036a100db0d10d7d8269f6278a6b0af20229d1d08a9e870ae1422f689c01dc99e53ea886a2fcd84931e096f4e79e6bc5d0dcb6e723375a932c80d1acf6b1502055e30542037595ecd5433de1edd6a704e5b47aaabe69e509e67787b6ee6454545cf3d4f9440872b7dff49387e917f57536ffe2df725b9d7809ba088352ccf84a2aa6decc8632b6a52ff5d14792d2aa5f55566798346449775b6e1cf00065c46d8597e94282f714840bf67aa79f0a011566220465a85dead5fb986e3213381611e74d882bc065a9dd6d22fdc995aa1c04ce14c1ef1e078e7313c227ce785e8ea8a443f955505843f92243fb7733abfc8fccb146164adfbeb3c42e6088ff221006672c44d15ade838d8a2eedcf76024ace2e18e966f6c588101604e53e6cbaa512fee40b589d01e8a521ec106b0927a69cd772c81f625f3aa92722e06157e394ed50074dd69944dfafdfef29848df627533bc38026a0522958cd13563ca0388c870decbbef7791500571456c0c07c4642d2a5e20b031f8e4545f173026bfe435c00362b2f648f375184b1206c9cacbbe541ef310331f50e84377b61fe9d208136ac5656c93d81cff6fe93a16f0db010fd80ec0bf8e7fb8e6945b17da0caa50355508850f26eb50059a62d626cc649aab7746f9834283131db9667ca78bd6cdf32087f7b2a085fb09692e094b2619d2c7a24835ee0877981c2b56463ed3340aabad44c626b0ef6d515f55a22806a9a86a51690a7b10a576620d56853c3811551d0f8e51d1a08c86fe402768d99a319fbff4de207e2ea9d778c0691aaa9b5595484d510a2dcc1753368ef47f00999cde882eda4d479bd6591b96eff88c70f3e13c2abd4bd130f8aed0abc2c33be0a7ab2b8fb0debc468dff9b3247a0ae090ee45e4a6cd2e5c2ac09421534f50b17c52aa9069cb94ad62ea386a1991cbefd7a1bec1437243614a8b43dbe87b4970cc0790cf81f40102bfdbd26e6e771f0045430556bcbe2b90497f16fc688ee9ec424a0c66b54eb65828288c80e556a5a78995de5d61d25c60a7439b84daf37c33a5e812d4876ee90e604ce7264d84af94c8cdd3f4c3a327770ff8b1c2721d1eddedd361f12d0492cce0dda424cf7c4d43b3fbfb9519ef2353b764e54cf30544ed2e32e59ec245041efa81bf912024f3651f8bf486338d875ce87ecd19a046491dd46522514fe982078acd606fabd550700bbace4ef5a1e1fa17959e7a6c4dcc802723eaf6b42a7b1c7f681bfe6b0a801a79b4dbe2973bb37594876a4bd1f570cb730b48036bc34f14721e7b26938155763fb5918f90de98fe31a0e536691c2a14cf3a26e27d7b74ad766d20d0ad1ddf138454d001ae4da3088bc4ec3972b547df8c8b95e80caeb92ebfc7b45ceddb9155da85a61c9ce07e1ad75f7a113215c34254458b103c92e58e55a5d7d3003ce21964371ebf3aee3826803033e5b9fee3ad54d9bb54e0df9c0f6", 0x1000}, {&(0x7f0000000040)="773efcdd982e128c2897df6f171f1275a4231d9039d6eb37004b2234b94f9307", 0x20}, {&(0x7f0000001280)="e0259fd64ee1e3d6f0c6eab184271b4e755023bf61919827e0ed66a31827e14337c6e8f20069db254810e5fd355c9ce55cb1a826fd4ef9d52ec418dc673e2b0115da588f4d3ebd14483e4df4c2e74e894332475a429c49f2eae031c1370ed7c9f3624c7902d240ea00099b5776a7e938aef3418487f2475585663d35a4425f1d33952d2fcc2b73a8e74386367ed0cd0dbe99e470ddb1f8a121bd8758800b37da5d8bdc2703ca52b0ae3ff43e907ac4e9d1da885260fd8318dd1051fc993a30e059ae40306ce8280042019a971b04e59adae210506a0b33bf", 0xd8}, {&(0x7f0000000080)="29ea26cc90f28f05a3078130c7fd57e899ada966ddc10238f57ee013fc62f1a0e821ca0f7d96", 0x26}], 0x4, 0x10, 0x1, {0x2}}) 00:18:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x5}, 0x0) 00:18:21 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x682) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0xc9f, 0xc, [0x5, 0xc0000000, 0x1]}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x100000000) 00:18:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x6}, 0x0) 00:18:22 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x682) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0xc9f, 0xc, [0x5, 0xc0000000, 0x1]}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x100000000) 00:18:22 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0xff, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x224, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x52}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r1}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5be7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x10}, 0x2000c004) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, 0x0) write$damon_init_regions(r7, &(0x7f00000000c0)={{}, {' ', 0x2}, {' ', 0x9}}, 0x3f) 00:18:22 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) syz_io_uring_setup(0x52e9, &(0x7f00000000c0)={0x0, 0xcd89, 0x1000, 0x0, 0x3de}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x20, 0x2004, @fd=r1, 0x7, 0xfff, 0x5, 0x5, 0x1, {0x1}}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:22 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) write$smackfs_cipsonum(r0, &(0x7f0000000100)=0x9, 0x14) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000080)={0x3, 0xfffffffc}) r2 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) read$smackfs_cipsonum(r2, &(0x7f00000001c0), 0x14) (async) ioctl$VHOST_VDPA_SET_STATUS(r1, 0x4001af72, &(0x7f0000000040)=0x8) (async) r3 = syz_open_dev$mouse(&(0x7f0000000140), 0x7, 0x121000) ioctl$VHOST_VDPA_GET_CONFIG(r3, 0x8008af73, &(0x7f0000000300)=ANY=[@ANYBLOB="000000080000feffffffffffe4ff0000743c11ce64a7317900000000000000000000000000000000000000000000000000000000000000000000000000001f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a21be3b3439cf0f49daafc44f43bf96399ace97363e2bc34269ec90730a6657ea255c22000000000000000000"]) 00:18:22 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x682) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0xc9f, 0xc, [0x5, 0xc0000000, 0x1]}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x100000000) 00:18:22 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f00000013c0)={0x1, 0x6}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x5, 0x2007, @fd_index=0x8, 0x7, &(0x7f00000000c0)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000040)="773efcdd982e128c2897df6f171f1275a4231d9039d6eb37004b2234b94f9307", 0x20}, {&(0x7f0000001280)="e0259fd64ee1e3d6f0c6eab184271b4e755023bf61919827e0ed66a31827e14337c6e8f20069db254810e5fd355c9ce55cb1a826fd4ef9d52ec418dc673e2b0115da588f4d3ebd14483e4df4c2e74e894332475a429c49f2eae031c1370ed7c9f3624c7902d240ea00099b5776a7e938aef3418487f2475585663d35a4425f1d33952d2fcc2b73a8e74386367ed0cd0dbe99e470ddb1f8a121bd8758800b37da5d8bdc2703ca52b0ae3ff43e907ac4e9d1da885260fd8318dd1051fc993a30e059ae40306ce8280042019a971b04e59adae210506a0b33bf", 0xd8}, {&(0x7f0000000080)="29ea26cc90f28f05a3078130c7fd57e899ada966ddc10238f57ee013fc62f1a0e821ca0f7d96", 0x26}], 0x4, 0x10, 0x1, {0x2}}) 00:18:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x7}, 0x0) 00:18:22 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0xff, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x224, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x52}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r1}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5be7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x10}, 0x2000c004) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, 0x0) write$damon_init_regions(r7, &(0x7f00000000c0)={{}, {' ', 0x2}, {' ', 0x9}}, 0x3f) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000080), 0xff, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x224, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x52}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r1}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5be7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x10}, 0x2000c004) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) (async) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, 0x0) (async) write$damon_init_regions(r7, &(0x7f00000000c0)={{}, {' ', 0x2}, {' ', 0x9}}, 0x3f) (async) 00:18:22 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x1000000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:22 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async, rerun: 64) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async, rerun: 64) syz_io_uring_setup(0x52e9, &(0x7f00000000c0)={0x0, 0xcd89, 0x1000, 0x0, 0x3de}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x20, 0x2004, @fd=r1, 0x7, 0xfff, 0x5, 0x5, 0x1, {0x1}}) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:22 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f00000013c0)={0x1, 0x6}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x5, 0x2007, @fd_index=0x8, 0x7, &(0x7f00000000c0)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000040)="773efcdd982e128c2897df6f171f1275a4231d9039d6eb37004b2234b94f9307", 0x20}, {&(0x7f0000001280)="e0259fd64ee1e3d6f0c6eab184271b4e755023bf61919827e0ed66a31827e14337c6e8f20069db254810e5fd355c9ce55cb1a826fd4ef9d52ec418dc673e2b0115da588f4d3ebd14483e4df4c2e74e894332475a429c49f2eae031c1370ed7c9f3624c7902d240ea00099b5776a7e938aef3418487f2475585663d35a4425f1d33952d2fcc2b73a8e74386367ed0cd0dbe99e470ddb1f8a121bd8758800b37da5d8bdc2703ca52b0ae3ff43e907ac4e9d1da885260fd8318dd1051fc993a30e059ae40306ce8280042019a971b04e59adae210506a0b33bf", 0xd8}, {&(0x7f0000000080)="29ea26cc90f28f05a3078130c7fd57e899ada966ddc10238f57ee013fc62f1a0e821ca0f7d96", 0x26}], 0x4, 0x10, 0x1, {0x2}}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001380), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f00000013c0)={0x1, 0x6}) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x5, 0x2007, @fd_index=0x8, 0x7, &(0x7f00000000c0)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000000040)="773efcdd982e128c2897df6f171f1275a4231d9039d6eb37004b2234b94f9307", 0x20}, {&(0x7f0000001280)="e0259fd64ee1e3d6f0c6eab184271b4e755023bf61919827e0ed66a31827e14337c6e8f20069db254810e5fd355c9ce55cb1a826fd4ef9d52ec418dc673e2b0115da588f4d3ebd14483e4df4c2e74e894332475a429c49f2eae031c1370ed7c9f3624c7902d240ea00099b5776a7e938aef3418487f2475585663d35a4425f1d33952d2fcc2b73a8e74386367ed0cd0dbe99e470ddb1f8a121bd8758800b37da5d8bdc2703ca52b0ae3ff43e907ac4e9d1da885260fd8318dd1051fc993a30e059ae40306ce8280042019a971b04e59adae210506a0b33bf", 0xd8}, {&(0x7f0000000080)="29ea26cc90f28f05a3078130c7fd57e899ada966ddc10238f57ee013fc62f1a0e821ca0f7d96", 0x26}], 0x4, 0x10, 0x1, {0x2}}) (async) 00:18:22 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x7dfa, 0x10000) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) 00:18:22 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x1000000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:22 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000080), 0xff, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_PORT_LIST_GET(r4, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x224, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}, {{0x8, 0x1, r1}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x52}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r1}, {0xc0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5be7}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x224}, 0x1, 0x0, 0x0, 0x10}, 0x2000c004) (async) ioctl$VHOST_VDPA_GET_CONFIG_SIZE(r3, 0x8004af79, &(0x7f0000000040)) (async) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) (async) r7 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, 0x0) (async) write$damon_init_regions(r7, &(0x7f00000000c0)={{}, {' ', 0x2}, {' ', 0x9}}, 0x3f) 00:18:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x9}, 0x0) 00:18:22 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x7dfa, 0x10000) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) syz_open_dev$sndctrl(&(0x7f0000000200), 0x7dfa, 0x10000) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) (async) 00:18:22 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) syz_io_uring_setup(0x52e9, &(0x7f00000000c0)={0x0, 0xcd89, 0x1000, 0x0, 0x3de}, &(0x7f0000000280)=0x0, &(0x7f00000002c0)) syz_io_uring_submit(r2, 0x0, &(0x7f0000000300)=@IORING_OP_READ_FIXED={0x4, 0x20, 0x2004, @fd=r1, 0x7, 0xfff, 0x5, 0x5, 0x1, {0x1}}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:22 executing program 1: ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x1000000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)=0x1000000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) 00:18:22 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x6800) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000100)) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xff}}, 0x18) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0x5452, &(0x7f0000000140)={'custom0\x00'}) 00:18:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x300}, 0x0) 00:18:22 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x7dfa, 0x10000) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) 00:18:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:22 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) 00:18:22 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x20000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000100)) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xf643, 0x44000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)=r1) 00:18:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x500}, 0x0) 00:18:22 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x6800) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000100)) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xff}}, 0x18) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0x5452, &(0x7f0000000140)={'custom0\x00'}) 00:18:22 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x40001000c, 0x200440) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044810}, 0x20000000) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, &(0x7f00000000c0)={0x0, 0x3ff}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:22 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) (async) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) 00:18:22 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x6800) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000100)) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xff}}, 0x18) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r3, 0x5452, &(0x7f0000000140)={'custom0\x00'}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x6800) (async) ioctl$VHOST_SET_LOG_BASE(r1, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000100)) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xff}}, 0x18) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r3, 0x5452, &(0x7f0000000140)={'custom0\x00'}) (async) 00:18:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@null, 0xe, 'batadv_slave_0\x00'}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000003c0)=0x200000000) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x4, 0x4, 0x5}, 0x1}}, 0x18) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 00:18:22 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async, rerun: 32) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x40001000c, 0x200440) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044810}, 0x20000000) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, &(0x7f00000000c0)={0x0, 0x3ff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:22 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) 00:18:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x600}, 0x0) 00:18:22 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x20000) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000100)) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xf643, 0x44000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)=r1) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x20000) (async) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000100)) (async) syz_open_dev$mouse(&(0x7f0000000080), 0xf643, 0x44000) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)=r1) (async) 00:18:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x2, 0x0) (async) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@null, 0xe, 'batadv_slave_0\x00'}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000003c0)=0x200000000) (async) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x4, 0x4, 0x5}, 0x1}}, 0x18) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 00:18:22 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_UNLINKAT={0x24, 0x20, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200}) 00:18:22 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xfffffffffffffff9, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x1) 00:18:22 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000000100), 0x40001000c, 0x200440) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xb}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044810}, 0x20000000) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r3, 0xc008af7b, &(0x7f00000000c0)={0x0, 0x3ff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x2, 0x0) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@null, 0xe, 'batadv_slave_0\x00'}) (async) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@null, 0xe, 'batadv_slave_0\x00'}) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f00000003c0)=0x200000000) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000140)={'custom1\x00'}) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x4, 0x4, 0x5}, 0x1}}, 0x18) (async) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x4, 0x4, 0x5}, 0x1}}, 0x18) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x0, r0}, 0x18) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) 00:18:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x700}, 0x0) 00:18:22 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xfffffffffffffff9, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x1) 00:18:22 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_UNLINKAT={0x24, 0x20, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200}) 00:18:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:22 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=0x12, 0x800) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x79, 0x1}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000100)) openat$cgroup_procs(r2, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:18:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x900}, 0x0) 00:18:22 executing program 2: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x20000) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r0, 0x8004af70, &(0x7f0000000100)) (async) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0xf643, 0x44000) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000140)=r1) 00:18:22 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0xfffffffffffffff9, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x1) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x1) 00:18:22 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_UNLINKAT={0x24, 0x20, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x200}) 00:18:22 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=0x12, 0x800) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x79, 0x1}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000100)) (async) openat$cgroup_procs(r2, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:18:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x4000}, 0x0) 00:18:22 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:18:22 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x30000}, 0x0) 00:18:22 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:22 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000540)=0x12, 0x800) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x79, 0x1}}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x4, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x79, 0x1}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000100)) openat$cgroup_procs(r2, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:18:22 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x7098c0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000040)={0x3d, 0x7}) 00:18:22 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:18:22 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = socket$inet(0x2, 0x80000, 0x8) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) prctl$PR_SET_DUMPABLE(0x4, 0x1) accept4$inet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x40800) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f00000000c0)=0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x2, 0x0, &(0x7f0000000280)=""/124, &(0x7f0000000300)=""/127, &(0x7f0000000380)=""/95, 0xd000}) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000180)={0x0, 0x40}) 00:18:22 executing program 0: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000500)={0x60, 0x23, 0x7e, {0x7e, 0x8, "601d6f327360c5ad1acff5b58cf0c05841c3d1dee57a0ab17067bec135e43b5f5af11522a80332cc61b6ad14ea2ff9eee4c1f67816b957cc91a9f5bd8471fcbd41a093fd64775b0cffb0f023ed59519a1daa6158326c6de8d3c585ed17d6cd5d6484d84ee738bc19d5c9d9256ee459200eb5753b6650a76298af763d"}}, &(0x7f00000005c0)={0x0, 0x3, 0xd5, @string={0xd5, 0x3, "2239722bdf283eef20066c5b71747ad12934217b32c92a48952319f7438db4a2b6bd215983e0fb4e0185ad53ccddb8492d402d0d17954f089b27b708c2f051e7ce9bad2ee3c705918f0772a72ac6be0fdc80303288e421b87bdc253ae28c7e9ca70d081d1b3880ca93055e9de4671d31a2b3c99b0202019178f3d48e1e89abf2e96a8fafa8bf012e783ddb835a9db035561ba16e09b702693a0f1526749d5f341d3762a5a293edd763e265341ebd797b168ba4831c61f484ae60823aa07a5921b6cda83bc6a7d217af71fce13365c3fd280fb8"}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x40, 0x34, 0xf4, "ecbcb7abae3df92f114539e17e608cb348122d81a38f609961ee3a6219713fb4282a2f47a97e78d52951cbe63784c280b2cde1cd1b4c4f38c82b7d880e1233c755ff74ae0690644d093ab0c2fb868b9fefafe5f0862e70af9839d18f317c5744628bc17cc9deb0415324a3d1e5130fbbd8eaf99bd0314f337fc13c26db65f718de1930547784d3ac76501a8905e8605b22f2ca2ff07d9948e9264a3010cf7c84a40b37c5e06ec6d305adf8c33c0388035d34450ad90044678a8cf1d2fe44891f98baa86e8657e3365a2247254ad0ce3343a1686ebcd67fe9e795af4531db09c3680959510d6fcda91d356695b068553f0328e7a3"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x81, 0x3, "2f5ae5"}, &(0x7f0000000840)={0x20, 0x82, 0x2, "82be"}, &(0x7f0000000880)={0x20, 0x83, 0x2, "22a1"}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "0e51b949"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "3ac833"}}) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x85, 0x2d00) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:22 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r1, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:22 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 00:18:22 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x34000}, 0x0) 00:18:22 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x7098c0) (async) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) (async) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000040)={0x3d, 0x7}) 00:18:23 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x440}, 0x400c2) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000000)=0xffffffffffffffff) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x490081) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000440)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x1}}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:23 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x7098c0) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000040)={0x3d, 0x7}) 00:18:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x400300}, 0x0) 00:18:23 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder-control\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x101, 0x111000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000840)=0x8000000) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0xdc800000}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x194, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5fa}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x10) 00:18:23 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x440}, 0x400c2) (async) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000000)=0xffffffffffffffff) (async) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x490081) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000440)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x1}}, 0x18) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r2, 0x311}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x87) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:23 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) socket$inet(0x2, 0x80000, 0x8) (async) r1 = socket$inet(0x2, 0x80000, 0x8) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) prctl$PR_SET_DUMPABLE(0x4, 0x1) accept4$inet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x40800) (async) accept4$inet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x40800) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f00000000c0)=0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_open_dev$mouse(&(0x7f0000000240), 0x1, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x2, 0x0, &(0x7f0000000280)=""/124, &(0x7f0000000300)=""/127, &(0x7f0000000380)=""/95, 0xd000}) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000180)={0x0, 0x40}) 00:18:23 executing program 0: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000500)={0x60, 0x23, 0x7e, {0x7e, 0x8, "601d6f327360c5ad1acff5b58cf0c05841c3d1dee57a0ab17067bec135e43b5f5af11522a80332cc61b6ad14ea2ff9eee4c1f67816b957cc91a9f5bd8471fcbd41a093fd64775b0cffb0f023ed59519a1daa6158326c6de8d3c585ed17d6cd5d6484d84ee738bc19d5c9d9256ee459200eb5753b6650a76298af763d"}}, &(0x7f00000005c0)={0x0, 0x3, 0xd5, @string={0xd5, 0x3, "2239722bdf283eef20066c5b71747ad12934217b32c92a48952319f7438db4a2b6bd215983e0fb4e0185ad53ccddb8492d402d0d17954f089b27b708c2f051e7ce9bad2ee3c705918f0772a72ac6be0fdc80303288e421b87bdc253ae28c7e9ca70d081d1b3880ca93055e9de4671d31a2b3c99b0202019178f3d48e1e89abf2e96a8fafa8bf012e783ddb835a9db035561ba16e09b702693a0f1526749d5f341d3762a5a293edd763e265341ebd797b168ba4831c61f484ae60823aa07a5921b6cda83bc6a7d217af71fce13365c3fd280fb8"}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x40, 0x34, 0xf4, "ecbcb7abae3df92f114539e17e608cb348122d81a38f609961ee3a6219713fb4282a2f47a97e78d52951cbe63784c280b2cde1cd1b4c4f38c82b7d880e1233c755ff74ae0690644d093ab0c2fb868b9fefafe5f0862e70af9839d18f317c5744628bc17cc9deb0415324a3d1e5130fbbd8eaf99bd0314f337fc13c26db65f718de1930547784d3ac76501a8905e8605b22f2ca2ff07d9948e9264a3010cf7c84a40b37c5e06ec6d305adf8c33c0388035d34450ad90044678a8cf1d2fe44891f98baa86e8657e3365a2247254ad0ce3343a1686ebcd67fe9e795af4531db09c3680959510d6fcda91d356695b068553f0328e7a3"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x81, 0x3, "2f5ae5"}, &(0x7f0000000840)={0x20, 0x82, 0x2, "82be"}, &(0x7f0000000880)={0x20, 0x83, 0x2, "22a1"}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "0e51b949"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "3ac833"}}) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x85, 0x2d00) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:23 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder-control\x00', 0x800, 0x0) (async, rerun: 64) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x101, 0x111000) (rerun: 64) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000840)=0x8000000) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0xdc800000}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x194, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5fa}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x10) 00:18:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x1000000}, 0x0) 00:18:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r2, 0x311}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x87) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:23 executing program 1: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r0}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x440}, 0x400c2) (async) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000000)=0xffffffffffffffff) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x490081) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000440)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x1}}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:23 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x0) r1 = socket$inet(0x2, 0x80000, 0x8) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) prctl$PR_SET_DUMPABLE(0x4, 0x1) accept4$inet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x40800) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f00000000c0)=0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000240), 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x2, 0x0, &(0x7f0000000280)=""/124, &(0x7f0000000300)=""/127, &(0x7f0000000380)=""/95, 0xd000}) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000180)={0x0, 0x40}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) prctl$PR_SET_DUMPABLE(0x4, 0x0) (async) socket$inet(0x2, 0x80000, 0x8) (async) getsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) prctl$PR_SET_DUMPABLE(0x4, 0x1) (async) accept4$inet(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x40800) (async) ioctl$VHOST_VDPA_SET_STATUS(0xffffffffffffffff, 0x4001af72, &(0x7f00000000c0)=0x7) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000240), 0x1, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000400)={0x2, 0x0, &(0x7f0000000280)=""/124, &(0x7f0000000300)=""/127, &(0x7f0000000380)=""/95, 0xd000}) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000140)) (async) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000180)={0x0, 0x40}) (async) 00:18:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x2000000}, 0x0) 00:18:23 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106}}, 0x20) 00:18:23 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r2, 0x311}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x87) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r2, 0x311}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x87) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) 00:18:23 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder-control\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x101, 0x111000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000840)=0x8000000) (async) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0xdc800000}) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000300)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0], 0x0, 0x8, &(0x7f00000003c0)=[{}], 0x8, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) (rerun: 32) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000007c0)={&(0x7f0000000600)={0x194, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8, 0x1, r2}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5fa}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x194}, 0x1, 0x0, 0x0, 0x80}, 0x10) 00:18:23 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x3000000}, 0x0) 00:18:23 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106}}, 0x20) (async) [ 1103.908448][ T10] usb 1-1: ath9k_htc: Firmware htc_9271.fw requested [ 1103.910513][T18624] usb 1-1: Direct firmware load for htc_9271.fw failed with error -2 [ 1103.913524][T18624] usb 1-1: Falling back to sysfs fallback for: htc_9271.fw 00:18:24 executing program 0: syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f00000000c0)={0x14, &(0x7f0000000500)={0x60, 0x23, 0x7e, {0x7e, 0x8, "601d6f327360c5ad1acff5b58cf0c05841c3d1dee57a0ab17067bec135e43b5f5af11522a80332cc61b6ad14ea2ff9eee4c1f67816b957cc91a9f5bd8471fcbd41a093fd64775b0cffb0f023ed59519a1daa6158326c6de8d3c585ed17d6cd5d6484d84ee738bc19d5c9d9256ee459200eb5753b6650a76298af763d"}}, &(0x7f00000005c0)={0x0, 0x3, 0xd5, @string={0xd5, 0x3, "2239722bdf283eef20066c5b71747ad12934217b32c92a48952319f7438db4a2b6bd215983e0fb4e0185ad53ccddb8492d402d0d17954f089b27b708c2f051e7ce9bad2ee3c705918f0772a72ac6be0fdc80303288e421b87bdc253ae28c7e9ca70d081d1b3880ca93055e9de4671d31a2b3c99b0202019178f3d48e1e89abf2e96a8fafa8bf012e783ddb835a9db035561ba16e09b702693a0f1526749d5f341d3762a5a293edd763e265341ebd797b168ba4831c61f484ae60823aa07a5921b6cda83bc6a7d217af71fce13365c3fd280fb8"}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x40, 0x34, 0xf4, "ecbcb7abae3df92f114539e17e608cb348122d81a38f609961ee3a6219713fb4282a2f47a97e78d52951cbe63784c280b2cde1cd1b4c4f38c82b7d880e1233c755ff74ae0690644d093ab0c2fb868b9fefafe5f0862e70af9839d18f317c5744628bc17cc9deb0415324a3d1e5130fbbd8eaf99bd0314f337fc13c26db65f718de1930547784d3ac76501a8905e8605b22f2ca2ff07d9948e9264a3010cf7c84a40b37c5e06ec6d305adf8c33c0388035d34450ad90044678a8cf1d2fe44891f98baa86e8657e3365a2247254ad0ce3343a1686ebcd67fe9e795af4531db09c3680959510d6fcda91d356695b068553f0328e7a3"}, &(0x7f0000000100)={0x0, 0xa, 0x1, 0x3f}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x81, 0x3, "2f5ae5"}, &(0x7f0000000840)={0x20, 0x82, 0x2, "82be"}, &(0x7f0000000880)={0x20, 0x83, 0x2, "22a1"}, &(0x7f00000008c0)={0x20, 0x84, 0x4, "0e51b949"}, &(0x7f0000000900)={0x20, 0x85, 0x3, "3ac833"}}) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x85, 0x2d00) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:24 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/155, 0x9b) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x4000000}, 0x0) 00:18:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x2, 0xb49752c28b2f82ee) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x20, 0x0, r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', r1, 0x1400}) 00:18:24 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106}}, 0x20) 00:18:24 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000a80)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x8000000000000001, 0x5, 0x2, 0x100], 0x4, &(0x7f0000000a40)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) syz_io_uring_setup(0x4a29, &(0x7f0000000b40)={0x0, 0x584d, 0x2000, 0x0, 0xff}, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000c40)=@IORING_OP_POLL_REMOVE={0x7, 0x66, 0x0, 0x0, 0x0, 0x1}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="70030000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="b400028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffffffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040014b9ffff08000600", @ANYRES32=r2, @ANYBLOB="0d000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040008d3ffff38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="d001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400030000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x370}, 0x1, 0x0, 0x0, 0x20000000}, 0x8045) 00:18:24 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/155, 0x9b) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/155, 0x9b) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) 00:18:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x5000000}, 0x0) 00:18:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x2, 0xb49752c28b2f82ee) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) (async) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x20, 0x0, r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', r1, 0x1400}) 00:18:24 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000000)={'custom0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4a}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) 00:18:24 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/155, 0x9b) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:24 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000a80)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x8000000000000001, 0x5, 0x2, 0x100], 0x4, &(0x7f0000000a40)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) syz_io_uring_setup(0x4a29, &(0x7f0000000b40)={0x0, 0x584d, 0x2000, 0x0, 0xff}, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000c40)=@IORING_OP_POLL_REMOVE={0x7, 0x66, 0x0, 0x0, 0x0, 0x1}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="70030000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="b400028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffffffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040014b9ffff08000600", @ANYRES32=r2, @ANYBLOB="0d000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040008d3ffff38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="d001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400030000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x370}, 0x1, 0x0, 0x0, 0x20000000}, 0x8045) 00:18:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x2, 0xb49752c28b2f82ee) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x20, 0x0, r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', r1, 0x1400}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000080), 0x2, 0xb49752c28b2f82ee) (async) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) (async) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@generic={&(0x7f0000000100)='./file0\x00'}, 0x18) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x20, 0x0, r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', r1, 0x1400}) (async) 00:18:24 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x5, 0x1, 0x2, 0x2, 0x81, 0x7, 0xd5, 0x3}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:24 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000040)="4d47d1102a57077c9e1e794703c2", 0xe) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f00000000c0)=0xffff) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x6000000}, 0x0) 00:18:24 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000000)={'custom0\x00'}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4a}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) 00:18:24 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000280)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) (async) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000a80)={'filter\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x8000000000000001, 0x5, 0x2, 0x100], 0x4, &(0x7f0000000a40)=[{}], 0x0, [{}, {}, {}, {}]}, 0xb8) (async) syz_io_uring_setup(0x4a29, &(0x7f0000000b40)={0x0, 0x584d, 0x2000, 0x0, 0xff}, &(0x7f0000000bc0)=0x0, &(0x7f0000000c00)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000c40)=@IORING_OP_POLL_REMOVE={0x7, 0x66, 0x0, 0x0, 0x0, 0x1}) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="70030000", @ANYRES16=0x0, @ANYBLOB="02002abd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="b400028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ffffffff40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040014b9ffff08000600", @ANYRES32=r2, @ANYBLOB="0d000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040008d3ffff38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="d001028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400030000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r4, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400040000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x370}, 0x1, 0x0, 0x0, 0x20000000}, 0x8045) 00:18:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) 00:18:24 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x5, 0x1, 0x2, 0x2, 0x81, 0x7, 0xd5, 0x3}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:24 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x8, 'ip6tnl0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'custom0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newspdinfo={0x34, 0x24, 0x1, 0x70bd25, 0x25dfdbfd, 0x10000, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x1) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4e21, 0x3f1, 0x4e21, 0x8, 0x2, 0x90, 0x20, 0x2}, {0x5, 0x9, 0x1000, 0x1, 0x8, 0x800, 0xfff, 0xef}, {0xfffffffffffffff9, 0x0, 0x8, 0x3109}, 0x8000, 0x0, 0x2, 0x0, 0x2, 0xacdd852e25cbab3b}, {{@in6=@local, 0x4d3, 0x2b}, 0x2, @in=@local, 0x34ff, 0x2, 0x0, 0x1, 0x8001, 0x3, 0x40}}, 0xe8) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000600)={0x6, 0x118, 0xfa00, {{0x1f, 0x2, "9729c3d5c51e4c3613cc56f3f71766d91c2080713e65e5af7d62fb94326c3f7d8e1e6bcefee5c83911b9c32878fb0f609ea0d43cd1df4706903a4ccb8516e4834b524c18c98b13945e22e62a9f372d034bd51998e3b481de375ca200a62fe78f9844eef2af7e54aeea8f66f8a15ade3d574e596f873ba088bf4019157ade9b161b74e04f3b2745a9bf89c179096273b17ee603c91cc30b56632bf31be88ef6d5a253f83df43cbc5716cafa6c72aca2059ed42ea04d090c73d7ba6180c0ea3fc8f1ed8cadc839fefabce1275bb2977f72908e3ab3c0ae0b2423619cadfd15fab44d6826f81e23aa8879b17e488343a5792888c2bb7479d8c35d3ffba0831db367", 0x3, 0x24, 0x81, 0x2, 0x80, 0x9d, 0x81}}}, 0x120) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002bbd7000fedbdf2502b14eade4306fdbcb880000000000000000000000040101"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 00:18:24 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000000)={'custom0\x00'}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_NOP={0x0, 0x4a}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x4) 00:18:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x7000000}, 0x0) 00:18:24 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) write$9p(0xffffffffffffffff, &(0x7f0000000040)="4d47d1102a57077c9e1e794703c2", 0xe) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f00000000c0)=0xffff) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async) write$9p(0xffffffffffffffff, &(0x7f0000000040)="4d47d1102a57077c9e1e794703c2", 0xe) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f00000000c0)=0xffff) (async) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) 00:18:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) 00:18:24 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x5, 0x1, 0x2, 0x2, 0x81, 0x7, 0xd5, 0x3}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x9000000}, 0x0) 00:18:24 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x8, 'ip6tnl0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'custom0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newspdinfo={0x34, 0x24, 0x1, 0x70bd25, 0x25dfdbfd, 0x10000, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x1) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4e21, 0x3f1, 0x4e21, 0x8, 0x2, 0x90, 0x20, 0x2}, {0x5, 0x9, 0x1000, 0x1, 0x8, 0x800, 0xfff, 0xef}, {0xfffffffffffffff9, 0x0, 0x8, 0x3109}, 0x8000, 0x0, 0x2, 0x0, 0x2, 0xacdd852e25cbab3b}, {{@in6=@local, 0x4d3, 0x2b}, 0x2, @in=@local, 0x34ff, 0x2, 0x0, 0x1, 0x8001, 0x3, 0x40}}, 0xe8) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000600)={0x6, 0x118, 0xfa00, {{0x1f, 0x2, "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", 0x3, 0x24, 0x81, 0x2, 0x80, 0x9d, 0x81}}}, 0x120) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002bbd7000fedbdf2502b14eade4306fdbcb880000000000000000000000040101"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x8, 'ip6tnl0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'custom0\x00'}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newspdinfo={0x34, 0x24, 0x1, 0x70bd25, 0x25dfdbfd, 0x10000, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x1) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4e21, 0x3f1, 0x4e21, 0x8, 0x2, 0x90, 0x20, 0x2}, {0x5, 0x9, 0x1000, 0x1, 0x8, 0x800, 0xfff, 0xef}, {0xfffffffffffffff9, 0x0, 0x8, 0x3109}, 0x8000, 0x0, 0x2, 0x0, 0x2, 0xacdd852e25cbab3b}, {{@in6=@local, 0x4d3, 0x2b}, 0x2, @in=@local, 0x34ff, 0x2, 0x0, 0x1, 0x8001, 0x3, 0x40}}, 0xe8) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000600)={0x6, 0x118, 0xfa00, {{0x1f, 0x2, "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", 0x3, 0x24, 0x81, 0x2, 0x80, 0x9d, 0x81}}}, 0x120) (async) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002bbd7000fedbdf2502b14eade4306fdbcb880000000000000000000000040101"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 00:18:24 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x4000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x42d9) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1fffffffffffc, 0x10000) 00:18:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x40000000}, 0x0) 00:18:24 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f0000000100)=0x80) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder-control\x00', 0x6, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:24 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000000)) 00:18:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0xc9d5d9f3}, 0x0) 00:18:24 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async) write$9p(0xffffffffffffffff, &(0x7f0000000040)="4d47d1102a57077c9e1e794703c2", 0xe) (async) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f00000000c0)=0xffff) (async) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:24 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x8, 'ip6tnl0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'custom0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newspdinfo={0x34, 0x24, 0x1, 0x70bd25, 0x25dfdbfd, 0x10000, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x1) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4e21, 0x3f1, 0x4e21, 0x8, 0x2, 0x90, 0x20, 0x2}, {0x5, 0x9, 0x1000, 0x1, 0x8, 0x800, 0xfff, 0xef}, {0xfffffffffffffff9, 0x0, 0x8, 0x3109}, 0x8000, 0x0, 0x2, 0x0, 0x2, 0xacdd852e25cbab3b}, {{@in6=@local, 0x4d3, 0x2b}, 0x2, @in=@local, 0x34ff, 0x2, 0x0, 0x1, 0x8001, 0x3, 0x40}}, 0xe8) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000600)={0x6, 0x118, 0xfa00, {{0x1f, 0x2, "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", 0x3, 0x24, 0x81, 0x2, 0x80, 0x9d, 0x81}}}, 0x120) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002bbd7000fedbdf2502b14eade4306fdbcb880000000000000000000000040101"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x8, 'ip6tnl0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'custom0\x00'}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newspdinfo={0x34, 0x24, 0x1, 0x70bd25, 0x25dfdbfd, 0x10000, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x1) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x4e21, 0x3f1, 0x4e21, 0x8, 0x2, 0x90, 0x20, 0x2}, {0x5, 0x9, 0x1000, 0x1, 0x8, 0x800, 0xfff, 0xef}, {0xfffffffffffffff9, 0x0, 0x8, 0x3109}, 0x8000, 0x0, 0x2, 0x0, 0x2, 0xacdd852e25cbab3b}, {{@in6=@local, 0x4d3, 0x2b}, 0x2, @in=@local, 0x34ff, 0x2, 0x0, 0x1, 0x8001, 0x3, 0x40}}, 0xe8) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000600)={0x6, 0x118, 0xfa00, {{0x1f, 0x2, "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", 0x3, 0x24, 0x81, 0x2, 0x80, 0x9d, 0x81}}}, 0x120) (async) setsockopt$X25_QBITINCL(r2, 0x106, 0x1, &(0x7f0000000040)=0x1, 0x4) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="04002bbd7000fedbdf2502b14eade4306fdbcb880000000000000000000000040101"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 00:18:24 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f0000000100)=0x80) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder-control\x00', 0x6, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:24 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x4000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x42d9) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1fffffffffffc, 0x10000) 00:18:24 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) 00:18:24 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x8000) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="737266c5", @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf25030000000900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x400c5}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x8040) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdfa50d00000008000300", @ANYRES32=0x0, @ANYBLOB="08000c000500000008000d000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x4008820) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004800}, 0x400c0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x2c}}, 0x4008010) r7 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, 0x0) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) 00:18:24 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3800000037020001040000000000000d0600000005000000", @ANYRES32=0x0, @ANYBLOB="1a002e2f62696e64657266732f62696e6465722d636f6e74726f6c00"], 0x38) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000000c0)={'custom0\x00'}) 00:18:24 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f0000000100)=0x80) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs2/binder-control\x00', 0x6, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:24 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x200000) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:24 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x9, 0x4000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x42d9) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1fffffffffffc, 0x10000) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0xf3d9d5c9}, 0x0) 00:18:25 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'binder0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:25 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x8000) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="737266c5", @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf25030000000900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x400c5}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x8040) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdfa50d00000008000300", @ANYRES32=0x0, @ANYBLOB="08000c000500000008000d000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x4008820) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004800}, 0x400c0) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x2c}}, 0x4008010) (async) r7 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) 00:18:25 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x200000) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0xffffff7f}, 0x0) 00:18:25 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3800000037020001040000000000000d0600000005000000", @ANYRES32=0x0, @ANYBLOB="1a002e2f62696e64657266732f62696e6465722d636f6e74726f6c00"], 0x38) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000000c0)={'custom0\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3800000037020001040000000000000d0600000005000000", @ANYRES32=0x0, @ANYBLOB="1a002e2f62696e64657266732f62696e6465722d636f6e74726f6c00"], 0x38) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000000c0)={'custom0\x00'}) (async) 00:18:25 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'binder0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:25 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x10000) 00:18:25 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x1, 0x200000) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:25 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x8000) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="737266c5", @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf25030000000900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x400c5}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x8040) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdfa50d00000008000300", @ANYRES32=0x0, @ANYBLOB="08000c000500000008000d000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x4008820) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004800}, 0x400c0) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x2c}}, 0x4008010) r7 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, 0x0) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) syz_open_dev$mouse(&(0x7f0000000040), 0x8, 0x8000) (async) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="737266c5", @ANYRES16=0x0, @ANYBLOB="000425bd7000fbdbdf25030000000900030073797a3000000000"], 0x20}, 0x1, 0x0, 0x0, 0x400c5}, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000400)={'wpan0\x00'}) (async) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000640)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x8040) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fedbdfa50d00000008000300", @ANYRES32=0x0, @ANYBLOB="08000c000500000008000d000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x48040}, 0x4008820) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r6, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004800}, 0x400c0) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) sendmsg$IEEE802154_SET_MACPARAMS(r5, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CCA_ED_LEVEL={0x8, 0x24, 0x3}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}]}, 0x2c}}, 0x4008010) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$inet_mtu(r7, 0x0, 0xa, &(0x7f0000000240), &(0x7f0000000280)=0x4) (async) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0xfffffff0}, 0x0) 00:18:25 executing program 5: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={'binder1\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x8}) 00:18:25 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x10000) 00:18:25 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3800000037020001040000000000000d0600000005000000", @ANYRES32=0x0, @ANYBLOB="1a002e2f62696e64657266732f62696e6465722d636f6e74726f6c00"], 0x38) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000000c0)={'custom0\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="3800000037020001040000000000000d0600000005000000", @ANYRES32=0x0, @ANYBLOB="1a002e2f62696e64657266732f62696e6465722d636f6e74726f6c00"], 0x38) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f00000000c0)={'custom0\x00'}) (async) 00:18:25 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'binder0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'binder0\x00'}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:25 executing program 5: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={'binder1\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x8}) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x8}) (async) 00:18:25 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x10000) 00:18:25 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x3000000000000}, 0x0) 00:18:25 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1ff, 0x22341) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x1, 0x8}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x0, 0x80}) 00:18:25 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="7d0200010000000000ffff917169b279a1e6f55cacbf38a32cffb7b30000583890164aff875a0d74d3bc62705bebab06000000cc532fbe785a2b8057f1909203356ede22401bbdf31a87058664b0414ee926376cef6f6303a9db5d3dba682ec400ea1edbd3b76ee772de53f8f852ece2f02166b9d5217e9e6076da7fe3c80718d5f3"]) 00:18:25 executing program 5: ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={'binder1\x00'}) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x8}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000000)={0x8}) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) 00:18:25 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000500)={'batadv_slave_0\x00', 0x592, 0x4ffff}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:25 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="7d0200010000000000ffff917169b279a1e6f55cacbf38a32cffb7b30000583890164aff875a0d74d3bc62705bebab06000000cc532fbe785a2b8057f1909203356ede22401bbdf31a87058664b0414ee926376cef6f6303a9db5d3dba682ec400ea1edbd3b76ee772de53f8f852ece2f02166b9d5217e9e6076da7fe3c80718d5f3"]) 00:18:25 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1ff, 0x22341) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x1, 0x8}) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x0, 0x80}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x1ff, 0x22341) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x1, 0x8}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x0, 0x80}) (async) 00:18:25 executing program 5: epoll_create1(0x80000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x8) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:25 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) 00:18:25 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="7d0200010000000000ffff917169b279a1e6f55cacbf38a32cffb7b30000583890164aff875a0d74d3bc62705bebab06000000cc532fbe785a2b8057f1909203356ede22401bbdf31a87058664b0414ee926376cef6f6303a9db5d3dba682ec400ea1edbd3b76ee772de53f8f852ece2f02166b9d5217e9e6076da7fe3c80718d5f3"]) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x100000000000000}, 0x0) 00:18:25 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async, rerun: 32) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1ff, 0x22341) (rerun: 32) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000080)={0x1, 0x8}) (async, rerun: 64) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000040)={0x0, 0x80}) (rerun: 64) 00:18:25 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (rerun: 32) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000500)={'batadv_slave_0\x00', 0x592, 0x4ffff}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:25 executing program 5: epoll_create1(0x80000) (async) epoll_create1(0x80000) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x8) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:25 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)}, 0x10) (async) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x200000000000000}, 0x0) 00:18:25 executing program 5: epoll_create1(0x80000) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040), 0x8) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:25 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:25 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000500)={'batadv_slave_0\x00', 0x592, 0x4ffff}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) (async) ioctl$SIOCX25GSUBSCRIP(0xffffffffffffffff, 0x89e0, &(0x7f0000000500)={'batadv_slave_0\x00', 0x592, 0x4ffff}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:25 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4040410) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000005c0)={'binder0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080), &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private1, @in=@private=0xa010100, 0x4e21, 0x4, 0x4e23, 0x6, 0xa, 0xe83b4042568481a9, 0x20, 0x80, r3, 0xee00}, {0x80000000, 0x2, 0x7ff, 0x3, 0x2, 0x800, 0x0, 0x7fff}, {0x20, 0x1c7, 0xfffffffffffffffc, 0x8}, 0x1, 0x6e6bb3, 0x0, 0x1, 0x3, 0x3}, {{@in=@private=0xa010101, 0x4d2, 0xff}, 0xa, @in=@multicast2, 0x0, 0x0, 0x1, 0xc3, 0xcdb, 0x200, 0x1}}, 0xe8) 00:18:25 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x8c180) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) 00:18:25 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x300000000000000}, 0x0) 00:18:25 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) read$smackfs_cipsonum(r2, &(0x7f0000000540), 0x14) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000580)={0x7, 0x15, 0x2}, 0x7) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x204000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0xffffffff, 0x63816984, 0x7fffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000500)={r5}) 00:18:25 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4040410) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000005c0)={'binder0\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080), &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private1, @in=@private=0xa010100, 0x4e21, 0x4, 0x4e23, 0x6, 0xa, 0xe83b4042568481a9, 0x20, 0x80, r3, 0xee00}, {0x80000000, 0x2, 0x7ff, 0x3, 0x2, 0x800, 0x0, 0x7fff}, {0x20, 0x1c7, 0xfffffffffffffffc, 0x8}, 0x1, 0x6e6bb3, 0x0, 0x1, 0x3, 0x3}, {{@in=@private=0xa010101, 0x4d2, 0xff}, 0xa, @in=@multicast2, 0x0, 0x0, 0x1, 0xc3, 0xcdb, 0x200, 0x1}}, 0xe8) 00:18:25 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="e347c7b4", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf252a00000b050036000000000006000400a1aa000005003600010000000a0001007770616e33000000"], 0x38}, 0x1, 0x0, 0x0, 0x40850}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x900, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x400000000000000}, 0x0) 00:18:25 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:25 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x8c180) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x8c180) (async) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) (async) 00:18:25 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) read$smackfs_cipsonum(r2, &(0x7f0000000540), 0x14) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000580)={0x7, 0x15, 0x2}, 0x7) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x204000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0xffffffff, 0x63816984, 0x7fffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000500)={r5}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) read$smackfs_cipsonum(r2, &(0x7f0000000540), 0x14) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) write$P9_RRENAME(r1, &(0x7f0000000580)={0x7, 0x15, 0x2}, 0x7) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x204000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0xffffffff, 0x63816984, 0x7fffffff}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000500)={r5}) (async) 00:18:25 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x20, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4040410) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f00000005c0)={'binder0\x00'}) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080), &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100), 0x0, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private1, @in=@private=0xa010100, 0x4e21, 0x4, 0x4e23, 0x6, 0xa, 0xe83b4042568481a9, 0x20, 0x80, r3, 0xee00}, {0x80000000, 0x2, 0x7ff, 0x3, 0x2, 0x800, 0x0, 0x7fff}, {0x20, 0x1c7, 0xfffffffffffffffc, 0x8}, 0x1, 0x6e6bb3, 0x0, 0x1, 0x3, 0x3}, {{@in=@private=0xa010101, 0x4d2, 0xff}, 0xa, @in=@multicast2, 0x0, 0x0, 0x1, 0xc3, 0xcdb, 0x200, 0x1}}, 0xe8) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x500000000000000}, 0x0) 00:18:25 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x8c180) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) 00:18:25 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x10000, 0x40) 00:18:25 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x600000000000000}, 0x0) 00:18:25 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="e347c7b4", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf252a00000b050036000000000006000400a1aa000005003600010000000a0001007770616e33000000"], 0x38}, 0x1, 0x0, 0x0, 0x40850}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x900, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:25 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) read$smackfs_cipsonum(r2, &(0x7f0000000540), 0x14) (async) read$smackfs_cipsonum(r2, &(0x7f0000000540), 0x14) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000580)={0x7, 0x15, 0x2}, 0x7) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x7, 0x204000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0xffffffff, 0x63816984, 0x7fffffff, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r4, 0xc00464b4, &(0x7f0000000500)={r5}) 00:18:25 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) 00:18:25 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x20) write$damon_init_regions(r0, &(0x7f00000000c0)={{}, {}, {' ', 0x3}}, 0x3f) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xf09d, 0x38880) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x5}) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x700000000000000}, 0x0) 00:18:25 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x10000, 0x40) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x10000, 0x40) 00:18:25 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) r0 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x20) write$damon_init_regions(r0, &(0x7f00000000c0)={{}, {}, {' ', 0x3}}, 0x3f) (async, rerun: 32) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xf09d, 0x38880) (rerun: 32) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x5}) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x900000000000000}, 0x0) 00:18:25 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:25 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x10000, 0x40) 00:18:25 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan3\x00'}) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="e347c7b4", @ANYRES16=0x0, @ANYBLOB="080026bd7000fbdbdf252a00000b050036000000000006000400a1aa000005003600010000000a0001007770616e33000000"], 0x38}, 0x1, 0x0, 0x0, 0x40850}, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x900, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4000000) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:25 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040001) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x4000000000000000}, 0x0) 00:18:25 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000080), 0x10001, 0x20) write$damon_init_regions(r0, &(0x7f00000000c0)={{}, {}, {' ', 0x3}}, 0x3f) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xf09d, 0x38880) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x5}) 00:18:25 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="7e61f1343262e20407465d22afae7aad719481bc87c6370ddfab323f5537d75de2e31c875deaf25447934714bd5c7bcda898ef97bde89bfad89946b158dee6ddf8578975066bd25e3f91fe65f7e30b0cf6572ac762d687468c2006b852a7b3cc71c208920aba539e33b298c07024d4ca9de545f2207a5bc2bd4dc305544966090332f8f180d9f213c16ea2abba51e0cff6f8a0e33cedc6b275135b0dc54ccd05c74434ee396680eebe79a5626da96837485bdad3ab72503e88cd86", @ANYBLOB="83742bbd7000ffdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000000000080a6b18f06732337f9b58fef90f7b1a70008002883"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000014) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, 0x28}}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000041) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) syz_open_dev$mouse(&(0x7f0000000280), 0x3ff, 0x200) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r5) 00:18:25 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0x1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5c050000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="400202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff07000008000100", @ANYRES32=r6, @ANYBLOB="6402028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r7, @ANYBLOB="3a0001002400eeff616374697665706f727400000000a41381985de9fde3f3e7969c0000000000000d00"/52, @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff070000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x55c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r9 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r9, 0xc1086201, &(0x7f0000000280)={'custom1\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r10 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r11, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r10, 0xc00464b4, &(0x7f0000000040)) 00:18:25 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040001) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0xf0ffffff00000000}, 0x0) 00:18:26 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async, rerun: 32) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ipvlan0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048040}, 0x4040001) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:26 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="7e61f1343262e20407465d22afae7aad719481bc87c6370ddfab323f5537d75de2e31c875deaf25447934714bd5c7bcda898ef97bde89bfad89946b158dee6ddf8578975066bd25e3f91fe65f7e30b0cf6572ac762d687468c2006b852a7b3cc71c208920aba539e33b298c07024d4ca9de545f2207a5bc2bd4dc305544966090332f8f180d9f213c16ea2abba51e0cff6f8a0e33cedc6b275135b0dc54ccd05c74434ee396680eebe79a5626da96837485bdad3ab72503e88cd86", @ANYBLOB="83742bbd7000ffdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000000000080a6b18f06732337f9b58fef90f7b1a70008002883"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000014) (async, rerun: 32) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, 0x28}}, 0x4000000) (async, rerun: 32) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000041) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) syz_open_dev$mouse(&(0x7f0000000280), 0x3ff, 0x200) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r5) 00:18:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x88, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="65c2cc7f2abc878e6932813a86c20764dc469f17b35351277dfee4547d75d5847f05055b0aee913b45e6b661a3557e8ca5e99542c099a37abd4c57b2e52726555df04590d97cdd", @ANYRES16=0x0, @ANYRESDEC=r0], 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) 00:18:26 executing program 4: clock_getres(0x3, &(0x7f0000000040)) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 00:18:26 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0x1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5c050000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="400202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff07000008000100", @ANYRES32=r6, @ANYBLOB="6402028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r7, @ANYBLOB="3a0001002400eeff616374697665706f727400000000a41381985de9fde3f3e7969c0000000000000d00"/52, @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff070000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x55c}, 0x1, 0x0, 0x0, 0x10}, 0x10) (async) r9 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r9, 0xc1086201, &(0x7f0000000280)={'custom1\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r10 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async, rerun: 32) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) write$RDMA_USER_CM_CMD_ACCEPT(r11, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, 0x0, 0x0) (rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r10, 0xc00464b4, &(0x7f0000000040)) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0xf3d9d5c900000000}, 0x0) 00:18:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x67c043) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x33, 0x80080) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000100000001000000700ffedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x40) 00:18:26 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="7e61f1343262e20407465d22afae7aad719481bc87c6370ddfab323f5537d75de2e31c875deaf25447934714bd5c7bcda898ef97bde89bfad89946b158dee6ddf8578975066bd25e3f91fe65f7e30b0cf6572ac762d687468c2006b852a7b3cc71c208920aba539e33b298c07024d4ca9de545f2207a5bc2bd4dc305544966090332f8f180d9f213c16ea2abba51e0cff6f8a0e33cedc6b275135b0dc54ccd05c74434ee396680eebe79a5626da96837485bdad3ab72503e88cd86", @ANYBLOB="83742bbd7000ffdbdf251500000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000200000000000080a6b18f06732337f9b58fef90f7b1a70008002883"], 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x20000014) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, 0x28}}, 0x4000000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000041) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000000280), 0x3ff, 0x200) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r5) 00:18:26 executing program 4: clock_getres(0x3, &(0x7f0000000040)) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) clock_getres(0x3, &(0x7f0000000040)) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async) 00:18:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x88, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="65c2cc7f2abc878e6932813a86c20764dc469f17b35351277dfee4547d75d5847f05055b0aee913b45e6b661a3557e8ca5e99542c099a37abd4c57b2e52726555df04590d97cdd", @ANYRES16=0x0, @ANYRESDEC=r0], 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x88, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="65c2cc7f2abc878e6932813a86c20764dc469f17b35351277dfee4547d75d5847f05055b0aee913b45e6b661a3557e8ca5e99542c099a37abd4c57b2e52726555df04590d97cdd", @ANYRES16=0x0, @ANYRESDEC=r0], 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) (async) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0xffff20a50080ffff}, 0x0) 00:18:26 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580), &(0x7f00000005c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000580)=0x0, &(0x7f00000005c0)=0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0x1, 0x58, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000780)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={0x1, 0x58, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000900)={0x1, 0x58, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940), &(0x7f0000000980)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x4) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000f40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="5c050000", @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf250100000008000100", @ANYRES32=r1, @ANYBLOB="400202803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000100000008000600", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="4c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r4, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="4800028044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r5, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff07000008000100", @ANYRES32=r6, @ANYBLOB="6402028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=r7, @ANYBLOB="3a0001002400eeff616374697665706f727400000000a41381985de9fde3f3e7969c0000000000000d00"/52, @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff070000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000100000008000600", @ANYRES32=0x0, @ANYBLOB], 0x55c}, 0x1, 0x0, 0x0, 0x10}, 0x10) r9 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r9, 0x113, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r9, 0xc1086201, &(0x7f0000000280)={'custom1\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r10 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r11 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r11, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r10, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r10, 0xc00464b4, &(0x7f0000000040)) 00:18:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x67c043) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x33, 0x80080) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000100000001000000700ffedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x40) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x67c043) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x33, 0x80080) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000100000001000000700ffedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x40) (async) 00:18:26 executing program 4: clock_getres(0x3, &(0x7f0000000040)) (async) clock_getres(0x3, &(0x7f0000000040)) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) 00:18:26 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001640)={0x9, 0x0, [{0x5000, 0x5d, &(0x7f0000000040)=""/93}, {0x0, 0x49, &(0x7f00000000c0)=""/73}, {0x3000, 0x57, &(0x7f0000000280)=""/87}, {0x2000, 0x35, &(0x7f0000000300)=""/53}, {0x0, 0x1000, &(0x7f0000000340)=""/4096}, {0x4, 0x40, &(0x7f0000001340)=""/64}, {0x2, 0xba, &(0x7f0000001380)=""/186}, {0xf000, 0xed, &(0x7f0000001440)=""/237}, {0x2000, 0xd3, &(0x7f0000001540)=""/211}]}) syz_io_uring_setup(0x4dfc, &(0x7f0000001780)={0x0, 0x2710, 0x2, 0x0, 0x16e}, &(0x7f0000001800), &(0x7f0000001840)) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='./binderfs/binder-control\x00', 0x800, 0x0) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0xffff8000a520ffff}, 0x0) 00:18:26 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) io_uring_setup(0x5725, &(0x7f0000000080)={0x0, 0x33c7, 0x0, 0x0, 0x2c8}) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x67c043) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x33, 0x80080) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000100000001000000700ffedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x40) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x67c043) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x33, 0x80080) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="10000100000001000000700ffedbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x40) (async) 00:18:26 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001640)={0x9, 0x0, [{0x5000, 0x5d, &(0x7f0000000040)=""/93}, {0x0, 0x49, &(0x7f00000000c0)=""/73}, {0x3000, 0x57, &(0x7f0000000280)=""/87}, {0x2000, 0x35, &(0x7f0000000300)=""/53}, {0x0, 0x1000, &(0x7f0000000340)=""/4096}, {0x4, 0x40, &(0x7f0000001340)=""/64}, {0x2, 0xba, &(0x7f0000001380)=""/186}, {0xf000, 0xed, &(0x7f0000001440)=""/237}, {0x2000, 0xd3, &(0x7f0000001540)=""/211}]}) syz_io_uring_setup(0x4dfc, &(0x7f0000001780)={0x0, 0x2710, 0x2, 0x0, 0x16e}, &(0x7f0000001800), &(0x7f0000001840)) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='./binderfs/binder-control\x00', 0x800, 0x0) 00:18:26 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e24, 0x4684, 0x4e23, 0x104, 0x2, 0x30, 0x20, 0x67, 0x0, r1}, {0x3f, 0x101, 0x8, 0x3, 0x7, 0x8, 0x7fffffff, 0x9}, {0xffffffffffffff55, 0x752, 0x4, 0x776ffb4e}, 0xffff, 0x6e6bb1, 0x0, 0x1, 0x2}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@remote, 0x0, 0x3, 0x3, 0x3, 0x24000000, 0x8, 0x4}}, 0xe8) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs2/binder-control\x00', 0x802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r4, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0], 0x0, 0x8, &(0x7f0000000c40)=[{}, {}], 0x10, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000001500)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000000f00)={0x5b0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2e8719f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @empty, 0x3}}}, 0x30) r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r14, 0x8004af7a, &(0x7f0000000640)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) 00:18:26 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) io_uring_setup(0x5725, &(0x7f0000000080)={0x0, 0x33c7, 0x0, 0x0, 0x2c8}) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) (async) io_uring_setup(0x5725, &(0x7f0000000080)={0x0, 0x33c7, 0x0, 0x0, 0x2c8}) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) 00:18:26 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x88, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="65c2cc7f2abc878e6932813a86c20764dc469f17b35351277dfee4547d75d5847f05055b0aee913b45e6b661a3557e8ca5e99542c099a37abd4c57b2e52726555df04590d97cdd", @ANYRES16=0x0, @ANYRESDEC=r0], 0x9c}, 0x1, 0x0, 0x0, 0x40010}, 0x4000) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0xffffff7f00000000}, 0x0) 00:18:26 executing program 1: accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10240) 00:18:26 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001640)={0x9, 0x0, [{0x5000, 0x5d, &(0x7f0000000040)=""/93}, {0x0, 0x49, &(0x7f00000000c0)=""/73}, {0x3000, 0x57, &(0x7f0000000280)=""/87}, {0x2000, 0x35, &(0x7f0000000300)=""/53}, {0x0, 0x1000, &(0x7f0000000340)=""/4096}, {0x4, 0x40, &(0x7f0000001340)=""/64}, {0x2, 0xba, &(0x7f0000001380)=""/186}, {0xf000, 0xed, &(0x7f0000001440)=""/237}, {0x2000, 0xd3, &(0x7f0000001540)=""/211}]}) (async) syz_io_uring_setup(0x4dfc, &(0x7f0000001780)={0x0, 0x2710, 0x2, 0x0, 0x16e}, &(0x7f0000001800), &(0x7f0000001840)) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000001880)='./binderfs/binder-control\x00', 0x800, 0x0) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0xffffffff00000000}, 0x0) 00:18:26 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e24, 0x4684, 0x4e23, 0x104, 0x2, 0x30, 0x20, 0x67, 0x0, r1}, {0x3f, 0x101, 0x8, 0x3, 0x7, 0x8, 0x7fffffff, 0x9}, {0xffffffffffffff55, 0x752, 0x4, 0x776ffb4e}, 0xffff, 0x6e6bb1, 0x0, 0x1, 0x2}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@remote, 0x0, 0x3, 0x3, 0x3, 0x24000000, 0x8, 0x4}}, 0xe8) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs2/binder-control\x00', 0x802, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r4, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0], 0x0, 0x8, &(0x7f0000000c40)=[{}, {}], 0x10, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0], 0x0, 0x8, &(0x7f0000000c40)=[{}, {}], 0x10, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000001500)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000000f00)={0x5b0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2e8719f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @empty, 0x3}}}, 0x30) r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r14, 0x8004af7a, &(0x7f0000000640)) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r14, 0x8004af7a, &(0x7f0000000640)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x2}, 0x0) 00:18:26 executing program 1: accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10240) accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10240) (async) 00:18:26 executing program 5: ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000040)) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_io_uring_setup(0x61c5, &(0x7f00000000c0)={0x0, 0xd9d3, 0x800, 0x1, 0xf8}, &(0x7f0000000280), &(0x7f00000002c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8, r1}, 0x18) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000380)={0x400, 0x6, 0x9, 0x7, 0xd3, 0x12, 0x21, "c0080a59b141e92a036effc21d197e54c625281f", "5f8bee509e06ee4854f01b7a89aa29fc93178374"}) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xd, 0x2, {{0x4, 0x0, 0x6}, 0x1}}, 0x18) 00:18:26 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) io_uring_setup(0x5725, &(0x7f0000000080)={0x0, 0x33c7, 0x0, 0x0, 0x2c8}) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:26 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r1 = geteuid() syz_io_uring_setup(0x31ed, &(0x7f0000000180)={0x0, 0x2a5a, 0x20, 0x0, 0x283}, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x5b63, &(0x7f00000002c0)={0x0, 0x6ae0, 0x400, 0x100, 0x2e}, &(0x7f0000000340), &(0x7f0000000380)) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4e22, 0x3, 0x4e24, 0x6, 0xa, 0x0, 0x20, 0x0, r3, r1}, {0x3, 0x1, 0x6, 0x401, 0xffffffffffffffff, 0x6b6, 0x1ff, 0x800}, {0xc83, 0x2, 0xa484, 0xffffffffffffffff}, 0x7f, 0x6e6bba, 0x1, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d6, 0xff}, 0xa, @in6=@loopback, 0x0, 0x1, 0x2, 0x0, 0x10000, 0x7, 0x4}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x7f, 0x4e22, 0x3, 0x2, 0x20, 0x20, 0x0, r0, r1}, {0x0, 0xfffffffffffffffb, 0xf3, 0x80, 0x4, 0x9, 0x146, 0x8}, {0x8, 0x8000, 0xd, 0x7}, 0xff, 0x6e6bbb, 0x2, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d2, 0x33}, 0xa, @in=@multicast1, 0x3503, 0x3, 0x3, 0x1f, 0x2, 0x3, 0x6}}, 0xe8) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) socket$inet(0x2, 0x800, 0x14) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x3}, 0x0) 00:18:26 executing program 1: accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10240) 00:18:26 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) 00:18:26 executing program 5: ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000040)) (async, rerun: 32) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_io_uring_setup(0x61c5, &(0x7f00000000c0)={0x0, 0xd9d3, 0x800, 0x1, 0xf8}, &(0x7f0000000280), &(0x7f00000002c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8, r1}, 0x18) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000380)={0x400, 0x6, 0x9, 0x7, 0xd3, 0x12, 0x21, "c0080a59b141e92a036effc21d197e54c625281f", "5f8bee509e06ee4854f01b7a89aa29fc93178374"}) (async) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xd, 0x2, {{0x4, 0x0, 0x6}, 0x1}}, 0x18) 00:18:26 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@remote, 0x4e24, 0x4684, 0x4e23, 0x104, 0x2, 0x30, 0x20, 0x67, 0x0, r1}, {0x3f, 0x101, 0x8, 0x3, 0x7, 0x8, 0x7fffffff, 0x9}, {0xffffffffffffff55, 0x752, 0x4, 0x776ffb4e}, 0xffff, 0x6e6bb1, 0x0, 0x1, 0x2}, {{@in6=@mcast1, 0x4d3, 0x2b}, 0x0, @in=@remote, 0x0, 0x3, 0x3, 0x3, 0x24000000, 0x8, 0x4}}, 0xe8) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000680)='./binderfs2/binder-control\x00', 0x802, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r4, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000007c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000a00)=0x0, &(0x7f0000000a40)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000a80)=0x0, &(0x7f0000000ac0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b40)={'team0\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000e40)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000bc0)=[0x0], &(0x7f0000000c00)=[0x0], 0x0, 0x8, &(0x7f0000000c40)=[{}, {}], 0x10, 0x10, &(0x7f0000000c80), &(0x7f0000000cc0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000d00)}}, 0x10) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000e80)={'team0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000ec0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r5, &(0x7f0000001500)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000014c0)={&(0x7f0000000f00)={0x5b0, 0x0, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8, 0x1, r6}, {0xc4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x40}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r9}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x254, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2e8719f9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x174, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}]}}]}, 0x5b0}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) (async, rerun: 64) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000100)={0x7, 0x15, 0x2}, 0x7) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e20, 0x2, @empty, 0x3}}}, 0x30) (rerun: 64) r14 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r14, 0x8004af7a, &(0x7f0000000640)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) (rerun: 64) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x4}, 0x0) 00:18:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000040), 0xde, 0x42002) 00:18:26 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r1 = geteuid() (async) syz_io_uring_setup(0x31ed, &(0x7f0000000180)={0x0, 0x2a5a, 0x20, 0x0, 0x283}, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x5b63, &(0x7f00000002c0)={0x0, 0x6ae0, 0x400, 0x100, 0x2e}, &(0x7f0000000340), &(0x7f0000000380)) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4e22, 0x3, 0x4e24, 0x6, 0xa, 0x0, 0x20, 0x0, r3, r1}, {0x3, 0x1, 0x6, 0x401, 0xffffffffffffffff, 0x6b6, 0x1ff, 0x800}, {0xc83, 0x2, 0xa484, 0xffffffffffffffff}, 0x7f, 0x6e6bba, 0x1, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d6, 0xff}, 0xa, @in6=@loopback, 0x0, 0x1, 0x2, 0x0, 0x10000, 0x7, 0x4}}, 0xe8) (async) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x7f, 0x4e22, 0x3, 0x2, 0x20, 0x20, 0x0, r0, r1}, {0x0, 0xfffffffffffffffb, 0xf3, 0x80, 0x4, 0x9, 0x146, 0x8}, {0x8, 0x8000, 0xd, 0x7}, 0xff, 0x6e6bbb, 0x2, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d2, 0x33}, 0xa, @in=@multicast1, 0x3503, 0x3, 0x3, 0x1f, 0x2, 0x3, 0x6}}, 0xe8) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) socket$inet(0x2, 0x800, 0x14) 00:18:26 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) 00:18:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000040), 0xde, 0x42002) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x5}, 0x0) 00:18:26 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) 00:18:26 executing program 5: ioctl$VHOST_VDPA_GET_GROUP_NUM(0xffffffffffffffff, 0x8004af81, &(0x7f0000000040)) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_io_uring_setup(0x61c5, &(0x7f00000000c0)={0x0, 0xd9d3, 0x800, 0x1, 0xf8}, &(0x7f0000000280), &(0x7f00000002c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x8, r1}, 0x18) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000380)={0x400, 0x6, 0x9, 0x7, 0xd3, 0x12, 0x21, "c0080a59b141e92a036effc21d197e54c625281f", "5f8bee509e06ee4854f01b7a89aa29fc93178374"}) (async) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000380)={0x400, 0x6, 0x9, 0x7, 0xd3, 0x12, 0x21, "c0080a59b141e92a036effc21d197e54c625281f", "5f8bee509e06ee4854f01b7a89aa29fc93178374"}) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xd, 0x2, {{0x4, 0x0, 0x6}, 0x1}}, 0x18) (async) write$P9_RLOPEN(0xffffffffffffffff, &(0x7f0000000340)={0x18, 0xd, 0x2, {{0x4, 0x0, 0x6}, 0x1}}, 0x18) 00:18:26 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x40, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f00000000c0)=0xffff) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@null, 0x4, 'veth0_to_hsr\x00'}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x3f, "3982b7", "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"}}, 0x110) 00:18:26 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x800, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x64d}}, 0x18) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x4, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) 00:18:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000040), 0xde, 0x42002) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x6}, 0x0) 00:18:26 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001340)={0x6, 0x0, [{0x5000, 0x29, &(0x7f0000000080)=""/41}, {0x4000, 0x1000, &(0x7f0000000280)=""/4096}, {0x2, 0x13, &(0x7f00000000c0)=""/19}, {0x2, 0x1c, &(0x7f0000000100)=""/28}, {0xd004, 0x7c, &(0x7f0000001280)=""/124}, {0xf000, 0x5, &(0x7f0000001300)=""/5}]}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x7, 0x46e603) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x458, 0x0, 0x3c91, 0x8, 0x7, 0xb, 0x2c, "97643d5fd23eeb6490e2a93edc71f094bd66678c", "7c3a2c8348ef98e3f829556c60c35f5a40ad9384"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x3, 0x3}) 00:18:26 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) r1 = geteuid() syz_io_uring_setup(0x31ed, &(0x7f0000000180)={0x0, 0x2a5a, 0x20, 0x0, 0x283}, &(0x7f0000000240), &(0x7f0000000280)) syz_io_uring_setup(0x5b63, &(0x7f00000002c0)={0x0, 0x6ae0, 0x400, 0x100, 0x2e}, &(0x7f0000000340), &(0x7f0000000380)) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4e22, 0x3, 0x4e24, 0x6, 0xa, 0x0, 0x20, 0x0, r3, r1}, {0x3, 0x1, 0x6, 0x401, 0xffffffffffffffff, 0x6b6, 0x1ff, 0x800}, {0xc83, 0x2, 0xa484, 0xffffffffffffffff}, 0x7f, 0x6e6bba, 0x1, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d6, 0xff}, 0xa, @in6=@loopback, 0x0, 0x1, 0x2, 0x0, 0x10000, 0x7, 0x4}}, 0xe8) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x7f, 0x4e22, 0x3, 0x2, 0x20, 0x20, 0x0, r0, r1}, {0x0, 0xfffffffffffffffb, 0xf3, 0x80, 0x4, 0x9, 0x146, 0x8}, {0x8, 0x8000, 0xd, 0x7}, 0xff, 0x6e6bbb, 0x2, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d2, 0x33}, 0xa, @in=@multicast1, 0x3503, 0x3, 0x3, 0x1f, 0x2, 0x3, 0x6}}, 0xe8) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) socket$inet(0x2, 0x800, 0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) geteuid() (async) syz_io_uring_setup(0x31ed, &(0x7f0000000180)={0x0, 0x2a5a, 0x20, 0x0, 0x283}, &(0x7f0000000240), &(0x7f0000000280)) (async) syz_io_uring_setup(0x5b63, &(0x7f00000002c0)={0x0, 0x6ae0, 0x400, 0x100, 0x2e}, &(0x7f0000000340), &(0x7f0000000380)) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)}, 0x10) (async) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@empty, 0x4e22, 0x3, 0x4e24, 0x6, 0xa, 0x0, 0x20, 0x0, r3, r1}, {0x3, 0x1, 0x6, 0x401, 0xffffffffffffffff, 0x6b6, 0x1ff, 0x800}, {0xc83, 0x2, 0xa484, 0xffffffffffffffff}, 0x7f, 0x6e6bba, 0x1, 0x1, 0x2, 0x3}, {{@in=@loopback, 0x4d6, 0xff}, 0xa, @in6=@loopback, 0x0, 0x1, 0x2, 0x0, 0x10000, 0x7, 0x4}}, 0xe8) (async) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e22, 0x7f, 0x4e22, 0x3, 0x2, 0x20, 0x20, 0x0, r0, r1}, {0x0, 0xfffffffffffffffb, 0xf3, 0x80, 0x4, 0x9, 0x146, 0x8}, {0x8, 0x8000, 0xd, 0x7}, 0xff, 0x6e6bbb, 0x2, 0x1, 0x1, 0x3}, {{@in=@broadcast, 0x4d2, 0x33}, 0xa, @in=@multicast1, 0x3503, 0x3, 0x3, 0x1f, 0x2, 0x3, 0x6}}, 0xe8) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) socket$inet(0x2, 0x800, 0x14) (async) 00:18:26 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x40, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f00000000c0)=0xffff) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@null, 0x4, 'veth0_to_hsr\x00'}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x3f, "3982b7", "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"}}, 0x110) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x40, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f00000000c0)=0xffff) (async) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@null, 0x4, 'veth0_to_hsr\x00'}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x3f, "3982b7", "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"}}, 0x110) (async) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x7}, 0x0) 00:18:26 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x800, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x64d}}, 0x18) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x4, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) 00:18:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x7, 0x46e603) (async) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x458, 0x0, 0x3c91, 0x8, 0x7, 0xb, 0x2c, "97643d5fd23eeb6490e2a93edc71f094bd66678c", "7c3a2c8348ef98e3f829556c60c35f5a40ad9384"}) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async, rerun: 64) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x3, 0x3}) (rerun: 64) 00:18:26 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000100)) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x40, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_VDPA_SET_CONFIG_CALL(r1, 0x4004af77, &(0x7f00000000c0)=0xffff) (async) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000500)={@null, 0x4, 'veth0_to_hsr\x00'}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000000600)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0x3f, "3982b7", "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"}}, 0x110) 00:18:26 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001340)={0x6, 0x0, [{0x5000, 0x29, &(0x7f0000000080)=""/41}, {0x4000, 0x1000, &(0x7f0000000280)=""/4096}, {0x2, 0x13, &(0x7f00000000c0)=""/19}, {0x2, 0x1c, &(0x7f0000000100)=""/28}, {0xd004, 0x7c, &(0x7f0000001280)=""/124}, {0xf000, 0x5, &(0x7f0000001300)=""/5}]}) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:26 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x9}, 0x0) 00:18:26 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x800, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x802, 0x0) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(0xffffffffffffffff, 0xc01064b3, &(0x7f0000000100)) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {&(0x7f0000000140), 0xffffffffffffffff, 0x64d}}, 0x18) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x4, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) 00:18:26 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x7, 0x46e603) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x458, 0x0, 0x3c91, 0x8, 0x7, 0xb, 0x2c, "97643d5fd23eeb6490e2a93edc71f094bd66678c", "7c3a2c8348ef98e3f829556c60c35f5a40ad9384"}) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (async) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) (async) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000100)={0x3, 0x3}) 00:18:26 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000580)={'custom0\x00'}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000840) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r3 = accept4$x25(r1, &(0x7f00000000c0), &(0x7f0000000800)=0x12, 0x80000) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:18:27 executing program 5: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001340)={0x6, 0x0, [{0x5000, 0x29, &(0x7f0000000080)=""/41}, {0x4000, 0x1000, &(0x7f0000000280)=""/4096}, {0x2, 0x13, &(0x7f00000000c0)=""/19}, {0x2, 0x1c, &(0x7f0000000100)=""/28}, {0xd004, 0x7c, &(0x7f0000001280)=""/124}, {0xf000, 0x5, &(0x7f0000001300)=""/5}]}) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:27 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:27 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) 00:18:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x300}, 0x0) 00:18:27 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x7ffffffdfffff000, 0x14f80) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1000, 0x2b0300) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x1) geteuid() r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x4) 00:18:27 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000580)={'custom0\x00'}) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000840) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async, rerun: 32) r3 = accept4$x25(r1, &(0x7f00000000c0), &(0x7f0000000800)=0x12, 0x80000) (rerun: 32) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:18:27 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x1803, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x500}, 0x0) 00:18:27 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) 00:18:27 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:27 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x7ffffffdfffff000, 0x14f80) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1000, 0x2b0300) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x1) (async) geteuid() (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x4) 00:18:27 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x1803, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:27 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) ioctl$SIOCX25SENDCALLACCPT(0xffffffffffffffff, 0x89e9) (async) 00:18:27 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:27 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x7ffffffdfffff000, 0x14f80) syz_open_dev$sndctrl(&(0x7f0000000080), 0x1000, 0x2b0300) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x1) geteuid() (async) geteuid() r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x4) 00:18:27 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000580)={'custom0\x00'}) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x4c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000840) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r3 = accept4$x25(r1, &(0x7f00000000c0), &(0x7f0000000800)=0x12, 0x80000) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000500), &(0x7f0000000540)=0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 00:18:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x600}, 0x0) 00:18:27 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x1803, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r1) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:27 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x4, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0xffffffff, 0xc, [0x6, 0x80000001, 0x1ff]}) 00:18:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x700}, 0x0) 00:18:27 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r2}, 0x18) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000008b0000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffff00000000003400"/147]) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000040)={{' ', 0xffffffffffffffff}, {' ', 0xffffffff}, {' ', 0x75}}, 0x3f) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:27 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5e, 0x0, 0x3, 0x0, 0x0}) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0xffffffff, 0x80100) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)={r1}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x10000) 00:18:27 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2, 0x101000) write$tcp_mem(r1, &(0x7f0000000500)={0x3, 0x20, 0x2, 0x20, 0x7}, 0x48) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000100)={0xa, 0x4}, 0xc) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000580)) 00:18:27 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) write$9p(0xffffffffffffffff, &(0x7f0000000080)="e6fbd6fcc6c1fb929719399073e527b8780740d18ddb8b1f6b60375133e7374e566f1549c274f8f01557ffaaa5f24347944aaab3f37e8d5890c4b55e997d5d49dbd9951b144712b366385c42ce4bbc62e2d0880b093fa4b574c458a9e0313ac1c478c058b20404eb", 0x68) 00:18:27 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r2}, 0x18) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000008b0000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffff00000000003400"/147]) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000040)={{' ', 0xffffffffffffffff}, {' ', 0xffffffff}, {' ', 0x75}}, 0x3f) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r2}, 0x18) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000008b0000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffff00000000003400"/147]) (async) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000040)={{' ', 0xffffffffffffffff}, {' ', 0xffffffff}, {' ', 0x75}}, 0x3f) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) 00:18:27 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) write$9p(0xffffffffffffffff, &(0x7f0000000080)="e6fbd6fcc6c1fb929719399073e527b8780740d18ddb8b1f6b60375133e7374e566f1549c274f8f01557ffaaa5f24347944aaab3f37e8d5890c4b55e997d5d49dbd9951b144712b366385c42ce4bbc62e2d0880b093fa4b574c458a9e0313ac1c478c058b20404eb", 0x68) 00:18:27 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5e, 0x0, 0x3, 0x0, 0x0}) (async) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0xffffffff, 0x80100) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)={r1}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x10000) 00:18:27 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x4, 0x10000) (async) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0xffffffff, 0xc, [0x6, 0x80000001, 0x1ff]}) 00:18:27 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2, 0x101000) write$tcp_mem(r1, &(0x7f0000000500)={0x3, 0x20, 0x2, 0x20, 0x7}, 0x48) (async) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000100)={0xa, 0x4}, 0xc) (async) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000580)) 00:18:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x900}, 0x0) 00:18:27 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async, rerun: 32) write$9p(0xffffffffffffffff, &(0x7f0000000080)="e6fbd6fcc6c1fb929719399073e527b8780740d18ddb8b1f6b60375133e7374e566f1549c274f8f01557ffaaa5f24347944aaab3f37e8d5890c4b55e997d5d49dbd9951b144712b366385c42ce4bbc62e2d0880b093fa4b574c458a9e0313ac1c478c058b20404eb", 0x68) (rerun: 32) 00:18:27 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x10, r2}, 0x18) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000008b0000000000000000000000000000000000000000000000000000000000000000000000000000edffffffffffffff00000000003400"/147]) (async) write$damon_init_regions(0xffffffffffffffff, &(0x7f0000000040)={{' ', 0xffffffffffffffff}, {' ', 0xffffffff}, {' ', 0x75}}, 0x3f) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:27 executing program 2: syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000040), &(0x7f0000000100)=0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x5e, 0x0, 0x3, 0x0, 0x0}) (async) r2 = syz_open_dev$mouse(&(0x7f0000000140), 0xffffffff, 0x80100) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f00000000c0)={r1}) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x10000) 00:18:27 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x4, 0x10000) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0xffffffff, 0xc, [0x6, 0x80000001, 0x1ff]}) 00:18:27 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) syz_open_dev$mouse(&(0x7f00000000c0), 0x2, 0x101000) (async) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x2, 0x101000) write$tcp_mem(r1, &(0x7f0000000500)={0x3, 0x20, 0x2, 0x20, 0x7}, 0x48) (async) write$tcp_mem(r1, &(0x7f0000000500)={0x3, 0x20, 0x2, 0x20, 0x7}, 0x48) write$RDMA_USER_CM_CMD_DISCONNECT(r3, &(0x7f0000000100)={0xa, 0x4}, 0xc) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r3, 0x8010af78, &(0x7f0000000580)) 00:18:27 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) 00:18:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x4000}, 0x0) 00:18:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fddbfb38090087a6f567d617229e540700000c00060000000000000000000c000600860000000400000008000100000000000c00b592ae928fc79ed2a08be027ab0e713b2448653df507f480bad2a1dc1ffc4b2cb5fbc2186e4b472f6a823e3de9d2141987786a759771c30826be358b9242c1195859f9ee7db8c23e833755567ab1c5ed0986bee0bd6a4b802fb785cef9471243cd3ca72f2719700357a149"], 0x40}, 0x1, 0x0, 0x0, 0x20044810}, 0x4081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r3, 0x311}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10080) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r5, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:27 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r0, 0x6}}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) 00:18:27 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x74, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x62001) syz_io_uring_setup(0x683, &(0x7f0000000500)={0x0, 0x8ff7, 0x800, 0x3, 0x2e8, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000580)) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r7, r8}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {r7, 0x94, "47fd93", "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"}}, 0x110) 00:18:27 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x40086602, 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) 00:18:27 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) (async) 00:18:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x30000}, 0x0) 00:18:27 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'binder0\x00'}) 00:18:27 executing program 1: syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x40086602, 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) 00:18:27 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r0, 0x6}}, 0x18) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) 00:18:27 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x74, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x62001) syz_io_uring_setup(0x683, &(0x7f0000000500)={0x0, 0x8ff7, 0x800, 0x3, 0x2e8, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000580)) (async) syz_io_uring_setup(0x683, &(0x7f0000000500)={0x0, 0x8ff7, 0x800, 0x3, 0x2e8, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000580)) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r7, r8}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {r7, 0x94, "47fd93", "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"}}, 0x110) 00:18:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x34000}, 0x0) 00:18:27 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x800, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000000c0)={'custom1\x00'}) 00:18:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fddbfb38090087a6f567d617229e540700000c00060000000000000000000c000600860000000400000008000100000000000c00b592ae928fc79ed2a08be027ab0e713b2448653df507f480bad2a1dc1ffc4b2cb5fbc2186e4b472f6a823e3de9d2141987786a759771c30826be358b9242c1195859f9ee7db8c23e833755567ab1c5ed0986bee0bd6a4b802fb785cef9471243cd3ca72f2719700357a149"], 0x40}, 0x1, 0x0, 0x0, 0x20044810}, 0x4081) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r3, 0x311}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10080) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r5, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) ioctl$BINDER_CTL_ADD(r5, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:27 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(0xffffffffffffffff, &(0x7f0000000140)={0xb, 0x10, 0xfa00, {&(0x7f0000000000), r0, 0x6}}, 0x18) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) 00:18:27 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async, rerun: 32) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x74, 0x0, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async, rerun: 32) r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x62001) syz_io_uring_setup(0x683, &(0x7f0000000500)={0x0, 0x8ff7, 0x800, 0x3, 0x2e8, 0x0, r1}, &(0x7f0000000100), &(0x7f0000000580)) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) (async, rerun: 64) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (rerun: 64) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (rerun: 64) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r7, r8}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000005c0)={0x9, 0x108, 0xfa00, {r7, 0x94, "47fd93", "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"}}, 0x110) 00:18:27 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r0, 0x40086602, 0xffffffffffffffff) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)) 00:18:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x400300}, 0x0) 00:18:27 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x800, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000000c0)={'custom1\x00'}) 00:18:27 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000000)={0x0, 0x4}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:27 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x800, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000000c0)={'custom1\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x800, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000000c0)={'custom1\x00'}) (async) 00:18:27 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)={0x4e, 0x14, [0x1b0d0, 0x1ff, 0x7ff, 0x0, 0x5]}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:27 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0xb608, 0x4900) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0x63, 0x14, [0x80000000, 0xfffffffd, 0x1f, 0xfffffffd, 0x64]}) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000000)={0x3, 0x20}) 00:18:27 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0) 00:18:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ff000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fddbfb38090087a6f567d617229e540700000c00060000000000000000000c000600860000000400000008000100000000000c00b592ae928fc79ed2a08be027ab0e713b2448653df507f480bad2a1dc1ffc4b2cb5fbc2186e4b472f6a823e3de9d2141987786a759771c30826be358b9242c1195859f9ee7db8c23e833755567ab1c5ed0986bee0bd6a4b802fb785cef9471243cd3ca72f2719700357a149"], 0x40}, 0x1, 0x0, 0x0, 0x20044810}, 0x4081) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r3, 0x311}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r3, 0x311}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={&(0x7f0000000080), 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10080) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r5 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r5, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:27 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000000)={0x0, 0x4}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:27 executing program 4: syz_io_uring_setup(0x5467, &(0x7f0000000080)={0x0, 0xf52e, 0x2, 0x1, 0x1dc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="9f83eb21d981a33110065a95c58d3fff37e6907ce025143a2bc5e8827fddb1388ca4d5550458ea6011b2c66b60be6b32ae401051c22dd3b74b7c4974a5d7c1a72e8d96b826a3d02327ac27ae2cc37c36adee1e647f58248eee3aa70130e46870daaaac597d91f890f8c174a79769cab4c5c4d1d2e45bd0c04c85293c951c83d1e6579383ddcc1b3deb1900358ae50fbf161ad6ebee427b453b8af7414f3f41d38095e4efe072724cca9801516cad5e7ba75340599c31", 0xb6, 0x40000}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x7ff, 0x3, 0x7ff}) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) 00:18:27 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)={0x4e, 0x14, [0x1b0d0, 0x1ff, 0x7ff, 0x0, 0x5]}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)={0x4e, 0x14, [0x1b0d0, 0x1ff, 0x7ff, 0x0, 0x5]}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:27 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0xb608, 0x4900) (async) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0xb608, 0x4900) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0x63, 0x14, [0x80000000, 0xfffffffd, 0x1f, 0xfffffffd, 0x64]}) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000000)={0x3, 0x20}) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000000)={0x3, 0x20}) 00:18:28 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) (async) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000000)={0x0, 0x4}) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r0, 0x4008af23, &(0x7f0000000000)={0x0, 0x4}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0) 00:18:28 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f00000000c0)={0x4e, 0x14, [0x1b0d0, 0x1ff, 0x7ff, 0x0, 0x5]}) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:28 executing program 4: syz_io_uring_setup(0x5467, &(0x7f0000000080)={0x0, 0xf52e, 0x2, 0x1, 0x1dc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="9f83eb21d981a33110065a95c58d3fff37e6907ce025143a2bc5e8827fddb1388ca4d5550458ea6011b2c66b60be6b32ae401051c22dd3b74b7c4974a5d7c1a72e8d96b826a3d02327ac27ae2cc37c36adee1e647f58248eee3aa70130e46870daaaac597d91f890f8c174a79769cab4c5c4d1d2e45bd0c04c85293c951c83d1e6579383ddcc1b3deb1900358ae50fbf161ad6ebee427b453b8af7414f3f41d38095e4efe072724cca9801516cad5e7ba75340599c31", 0xb6, 0x40000}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x7ff, 0x3, 0x7ff}) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) syz_io_uring_setup(0x5467, &(0x7f0000000080)={0x0, 0xf52e, 0x2, 0x1, 0x1dc}, &(0x7f0000000100), &(0x7f0000000140)) (async) syz_io_uring_submit(r0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="9f83eb21d981a33110065a95c58d3fff37e6907ce025143a2bc5e8827fddb1388ca4d5550458ea6011b2c66b60be6b32ae401051c22dd3b74b7c4974a5d7c1a72e8d96b826a3d02327ac27ae2cc37c36adee1e647f58248eee3aa70130e46870daaaac597d91f890f8c174a79769cab4c5c4d1d2e45bd0c04c85293c951c83d1e6579383ddcc1b3deb1900358ae50fbf161ad6ebee427b453b8af7414f3f41d38095e4efe072724cca9801516cad5e7ba75340599c31", 0xb6, 0x40000}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x7ff, 0x3, 0x7ff}) (async) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) (async) 00:18:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x3000000}, 0x0) 00:18:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0xb608, 0x4900) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0x63, 0x14, [0x80000000, 0xfffffffd, 0x1f, 0xfffffffd, 0x64]}) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000000)={0x3, 0x20}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000040), 0xb608, 0x4900) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000080)={0x63, 0x14, [0x80000000, 0xfffffffd, 0x1f, 0xfffffffd, 0x64]}) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r0, 0xc008af7b, &(0x7f0000000000)={0x3, 0x20}) (async) 00:18:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="44020000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400bf00000008000600", @ANYRES32=r1, @ANYBLOB="3800010024000100616374697665706f72740000000000000000000000000000000000000000000005000300035fd5fbe4486721232800fdff07000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000000000"], 0x244}, 0x1, 0x0, 0x0, 0x4}, 0x4014) 00:18:28 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000280)) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f0000000080)) ioctl$BINDER_CTL_ADD(r3, 0x5452, &(0x7f0000000140)={'binder1\x00'}) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000002c0)={'pim6reg0\x00', 0x200, 0x4}) 00:18:28 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000540)={0x0, 0x1f}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000100)={0x2}) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_getres(0x0, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)) 00:18:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="44020000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400bf00000008000600", @ANYRES32=r1, @ANYBLOB="3800010024000100616374697665706f72740000000000000000000000000000000000000000000005000300035fd5fbe4486721232800fdff07000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000000000"], 0x244}, 0x1, 0x0, 0x0, 0x4}, 0x4014) 00:18:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x4000000}, 0x0) 00:18:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="44020000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400bf00000008000600", @ANYRES32=r1, @ANYBLOB="3800010024000100616374697665706f72740000000000000000000000000000000000000000000005000300035fd5fbe4486721232800fdff07000400", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000300000008000600", @ANYRES32=r2, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300030000000800040000000000"], 0x244}, 0x1, 0x0, 0x0, 0x4}, 0x4014) 00:18:28 executing program 4: syz_io_uring_setup(0x5467, &(0x7f0000000080)={0x0, 0xf52e, 0x2, 0x1, 0x1dc}, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r0, 0x0, &(0x7f0000000240)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)="9f83eb21d981a33110065a95c58d3fff37e6907ce025143a2bc5e8827fddb1388ca4d5550458ea6011b2c66b60be6b32ae401051c22dd3b74b7c4974a5d7c1a72e8d96b826a3d02327ac27ae2cc37c36adee1e647f58248eee3aa70130e46870daaaac597d91f890f8c174a79769cab4c5c4d1d2e45bd0c04c85293c951c83d1e6579383ddcc1b3deb1900358ae50fbf161ad6ebee427b453b8af7414f3f41d38095e4efe072724cca9801516cad5e7ba75340599c31", 0xb6, 0x40000}) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x7ff, 0x3, 0x7ff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000280)={0x7ff, 0x3, 0x7ff}) ioctl$BINDER_CTL_ADD(r1, 0x541b, 0x0) 00:18:28 executing program 5: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000280)) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) (async) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f0000000080)) ioctl$BINDER_CTL_ADD(r3, 0x5452, &(0x7f0000000140)={'binder1\x00'}) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000002c0)={'pim6reg0\x00', 0x200, 0x4}) 00:18:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}}, 0x0) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x87c4e7f1459a378b}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r2, 0x303, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x80) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r11, 0x311}, 0x14}}, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r12, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r7, 0x2, 0x70bd26, 0x1, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x84, r11, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x84}, 0x1, 0x0, 0x0, 0x40040081}, 0x4000080) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r7, 0x311}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000094}, 0x4008000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9}, 0x8) syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x8000) 00:18:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x5000000}, 0x0) 00:18:28 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000540)={0x0, 0x1f}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000100)={0x2}) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_getres(0x0, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)) 00:18:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x604, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x8caec54c363532ea}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x40001) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x541b, 0x0) 00:18:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9}, 0x8) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x8000) 00:18:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x6000000}, 0x0) 00:18:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}}, 0x0) (async, rerun: 32) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x87c4e7f1459a378b}, 0x0) (rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r2, 0x303, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r11, 0x311}, 0x14}}, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r12, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r7, 0x2, 0x70bd26, 0x1, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x84, r11, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x84}, 0x1, 0x0, 0x0, 0x40040081}, 0x4000080) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r7, 0x311}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000094}, 0x4008000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x604, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x8caec54c363532ea}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x40001) (async, rerun: 64) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x541b, 0x0) (rerun: 64) 00:18:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x9}, 0x8) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x8000) 00:18:28 executing program 5: syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) ioctl$SIOCX25GFACILITIES(r1, 0x89e2, &(0x7f0000000280)) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) (async) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r4, 0x8004af81, &(0x7f0000000080)) ioctl$BINDER_CTL_ADD(r3, 0x5452, &(0x7f0000000140)={'binder1\x00'}) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f00000002c0)={'pim6reg0\x00', 0x200, 0x4}) 00:18:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x7000000}, 0x0) 00:18:28 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000540)={0x0, 0x1f}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000100)={0x2}) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_getres(0x0, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000040)) 00:18:28 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x604, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x8caec54c363532ea}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x40001) (async) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x541b, 0x0) 00:18:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) socket$inet(0x2, 0x2, 0x401) 00:18:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x9000000}, 0x0) 00:18:28 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x4) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x338, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xbf5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xdc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6b79, 0xf8, 0x80, 0x2}, {0xf727, 0x80, 0x1, 0xa1b}, {0xf42, 0xcc, 0x5, 0x86a}, {0x9, 0x1f, 0x1f}, {0x6, 0xc0, 0x2, 0x6}, {0xcae, 0x7, 0x5, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x338}, 0x1, 0x0, 0x0, 0x2204c881}, 0x800) 00:18:28 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r5, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x87c4e7f1459a378b}, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000640)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r8, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r2, 0x303, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x80) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r11, 0x311}, 0x14}}, 0x0) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000380)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r12, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r7, 0x2, 0x70bd26, 0x1, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x4000000) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x84, r11, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0x44, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xc5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x84}, 0x1, 0x0, 0x0, 0x40040081}, 0x4000080) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r7, 0x311}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r7, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000094}, 0x4008000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:28 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x802, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x800, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x1003, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000000c0)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000200)=""/16, 0x10, 0x0, &(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) socket$inet(0x2, 0x2, 0x401) 00:18:28 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x4) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x338, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xbf5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xdc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6b79, 0xf8, 0x80, 0x2}, {0xf727, 0x80, 0x1, 0xa1b}, {0xf42, 0xcc, 0x5, 0x86a}, {0x9, 0x1f, 0x1f}, {0x6, 0xc0, 0x2, 0x6}, {0xcae, 0x7, 0x5, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x338}, 0x1, 0x0, 0x0, 0x2204c881}, 0x800) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100), &(0x7f00000003c0)=0x4) (async) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x338, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xbf5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xdc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6b79, 0xf8, 0x80, 0x2}, {0xf727, 0x80, 0x1, 0xa1b}, {0xf42, 0xcc, 0x5, 0x86a}, {0x9, 0x1f, 0x1f}, {0x6, 0xc0, 0x2, 0x6}, {0xcae, 0x7, 0x5, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x338}, 0x1, 0x0, 0x0, 0x2204c881}, 0x800) (async) 00:18:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x40000000}, 0x0) 00:18:28 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x802, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x800, 0x0) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x1003, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000000c0)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) recvfrom$inet(r2, &(0x7f0000000200)=""/16, 0x10, 0x0, &(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x10) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:28 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) socket$inet(0x2, 0x2, 0x401) 00:18:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x30000) 00:18:28 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:28 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x3, 0x2) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x4) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000400)={0x338, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xbf5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r3}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0xdc, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x6b79, 0xf8, 0x80, 0x2}, {0xf727, 0x80, 0x1, 0xa1b}, {0xf42, 0xcc, 0x5, 0x86a}, {0x9, 0x1f, 0x1f}, {0x6, 0xc0, 0x2, 0x6}, {0xcae, 0x7, 0x5, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}]}, 0x338}, 0x1, 0x0, 0x0, 0x2204c881}, 0x800) 00:18:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0xc9d5d9f3}, 0x0) 00:18:28 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x802, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x800, 0x0) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x1003, 0x0) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000000c0)={'binder1\x00'}) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000200)=""/16, 0x10, 0x0, &(0x7f0000000240)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x30000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x30000) (async) 00:18:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r3, r4}}, 0x18) r5 = syz_clone(0xc0000, &(0x7f0000000180)="b7cc30ebb5de1834305fda335d18ce24e56578a6d4a3e11f225f9ff56caa6e26f1574e555477d1", 0x27, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="df700ef73ba0301e7aa2002fbc1652e60f6fc7f491afaa03f34832053b41cefc23f4d801e2c5afc25e592494edbae8a08c02a907205d95922cbfc95252df641086daf91547d2b74d840fb6d604134dd5bd399480ac3bb54678caad4501d4703abed6b303ffb69cb8665e1ff8838e9feb3bd85955076143fbeb7b9a4b726cca1a8fcdd884e5e79b8dc3fa0710a624647516a411241fb196df9321d886c0f40e5299a50a3b60d0fed6a9df363f36ddead977") sched_rr_get_interval(r5, &(0x7f0000000580)) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r3, 0x1}}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x482000) 00:18:28 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:28 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) syz_io_uring_setup(0x7d3f, &(0x7f0000000080)={0x0, 0xc614, 0x400, 0x3, 0x27e}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) 00:18:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0xf0ffffff}, 0x0) 00:18:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x30000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x30000) (async) 00:18:28 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) write$tcp_mem(r2, &(0x7f00000000c0)={0xfffffffff7cc910f, 0x20, 0x7, 0x20, 0x7fff}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:28 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) syz_io_uring_setup(0x7d3f, &(0x7f0000000080)={0x0, 0xc614, 0x400, 0x3, 0x27e}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) 00:18:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0xf3d9d5c9}, 0x0) 00:18:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000002, 0x20042) 00:18:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r3, r4}}, 0x18) r5 = syz_clone(0xc0000, &(0x7f0000000180)="b7cc30ebb5de1834305fda335d18ce24e56578a6d4a3e11f225f9ff56caa6e26f1574e555477d1", 0x27, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="df700ef73ba0301e7aa2002fbc1652e60f6fc7f491afaa03f34832053b41cefc23f4d801e2c5afc25e592494edbae8a08c02a907205d95922cbfc95252df641086daf91547d2b74d840fb6d604134dd5bd399480ac3bb54678caad4501d4703abed6b303ffb69cb8665e1ff8838e9feb3bd85955076143fbeb7b9a4b726cca1a8fcdd884e5e79b8dc3fa0710a624647516a411241fb196df9321d886c0f40e5299a50a3b60d0fed6a9df363f36ddead977") sched_rr_get_interval(r5, &(0x7f0000000580)) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r3, 0x1}}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x482000) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x482000) 00:18:28 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x0, 0x8, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x9, 0xffffffc0, 0x100, 0x240, r1, 0xfffffffe, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1}, 0x48) r7 = syz_open_dev$mouse(&(0x7f0000001000), 0xed9, 0x1530c3) r8 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r8, 0x89e8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={r7, 0x58, &(0x7f0000001040)}, 0x10) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000001100)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000d00)=[{}], 0x8, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001600)=0x0, &(0x7f0000001640)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001580)={&(0x7f0000001680)={0x614, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x157}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaa}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7109}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r10}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0x20044044}, 0x80) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:28 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) syz_io_uring_setup(0x7d3f, &(0x7f0000000080)={0x0, 0xc614, 0x400, 0x3, 0x27e}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) syz_io_uring_setup(0x7d3f, &(0x7f0000000080)={0x0, 0xc614, 0x400, 0x3, 0x27e}, &(0x7f0000000000), &(0x7f0000000100)) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000140)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x2}}) (async) 00:18:28 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0xffffff7f}, 0x0) 00:18:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000002, 0x20042) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000002, 0x20042) (async) 00:18:28 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) write$tcp_mem(r2, &(0x7f00000000c0)={0xfffffffff7cc910f, 0x20, 0x7, 0x20, 0x7fff}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:28 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x0, 0x8, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) (async) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x9, 0xffffffc0, 0x100, 0x240, r1, 0xfffffffe, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1}, 0x48) (async) r7 = syz_open_dev$mouse(&(0x7f0000001000), 0xed9, 0x1530c3) (async) r8 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r8, 0x89e8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={r7, 0x58, &(0x7f0000001040)}, 0x10) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) (async) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000001100)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000d00)=[{}], 0x8, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001600)=0x0, &(0x7f0000001640)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001580)={&(0x7f0000001680)={0x614, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x157}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaa}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7109}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r10}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0x20044044}, 0x80) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:28 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000002, 0x20042) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000002, 0x20042) (async) [ 1109.033830][ T2212] ieee802154 phy0 wpan0: encryption failed: -22 [ 1109.035596][ T2212] ieee802154 phy1 wpan1: encryption failed: -22 00:18:28 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x5, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r3, r4}}, 0x18) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r3, r4}}, 0x18) r5 = syz_clone(0xc0000, &(0x7f0000000180)="b7cc30ebb5de1834305fda335d18ce24e56578a6d4a3e11f225f9ff56caa6e26f1574e555477d1", 0x27, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="df700ef73ba0301e7aa2002fbc1652e60f6fc7f491afaa03f34832053b41cefc23f4d801e2c5afc25e592494edbae8a08c02a907205d95922cbfc95252df641086daf91547d2b74d840fb6d604134dd5bd399480ac3bb54678caad4501d4703abed6b303ffb69cb8665e1ff8838e9feb3bd85955076143fbeb7b9a4b726cca1a8fcdd884e5e79b8dc3fa0710a624647516a411241fb196df9321d886c0f40e5299a50a3b60d0fed6a9df363f36ddead977") sched_rr_get_interval(r5, &(0x7f0000000580)) (async) sched_rr_get_interval(r5, &(0x7f0000000580)) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r3, 0x1}}, 0x18) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x482000) 00:18:28 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) write$tcp_mem(r2, &(0x7f00000000c0)={0xfffffffff7cc910f, 0x20, 0x7, 0x20, 0x7fff}, 0x48) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0xfffffff0}, 0x0) 00:18:29 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:29 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x8000) r0 = socket(0x28, 0x6, 0x9) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x800) 00:18:29 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async, rerun: 64) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (rerun: 64) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x4) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x0, 0x8, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) (async) ioctl$SIOCX25CALLACCPTAPPRV(r1, 0x89e8) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@bloom_filter={0x1e, 0x9, 0xffffffc0, 0x100, 0x240, r1, 0xfffffffe, '\x00', r4, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x1}, 0x48) (async) r7 = syz_open_dev$mouse(&(0x7f0000001000), 0xed9, 0x1530c3) (async) r8 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r8, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SIOCX25CALLACCPTAPPRV(r8, 0x89e8) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000010c0)={r7, 0x58, &(0x7f0000001040)}, 0x10) (rerun: 64) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000f40)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) (async) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000001100)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f00)={0xffffffffffffffff, 0xe0, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000d00)=[{}], 0x8, 0x10, &(0x7f0000000d40), &(0x7f0000000d80), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000dc0)}}, 0x10) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000001600)=0x0, &(0x7f0000001640)=0x4) (rerun: 32) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001580)={&(0x7f0000001680)={0x614, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x157}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xaa}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7109}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8, 0x1, r10}, {0x1e8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x614}, 0x1, 0x0, 0x0, 0x20044044}, 0x80) (async, rerun: 64) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (rerun: 64) 00:18:29 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x1f, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000500)={0xf, 0x8, 0xfa00, {r4, 0x8}}, 0x10) 00:18:29 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) 00:18:29 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x8000) r0 = socket(0x28, 0x6, 0x9) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x800) 00:18:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x3000000000000}, 0x0) 00:18:29 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x1f, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000500)={0xf, 0x8, 0xfa00, {r4, 0x8}}, 0x10) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x1f, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000500)={0xf, 0x8, 0xfa00, {r4, 0x8}}, 0x10) (async) 00:18:29 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000280)={'custom0\x00'}) 00:18:29 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x8000) (async) r0 = socket(0x28, 0x6, 0x9) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, &(0x7f0000000080)=0x10, 0x800) 00:18:29 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x1f, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000500)={0xf, 0x8, 0xfa00, {r4, 0x8}}, 0x10) 00:18:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x40030000000000}, 0x0) 00:18:29 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) 00:18:29 executing program 2: io_uring_setup(0x157e, &(0x7f0000000180)) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:29 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000280)={'custom0\x00'}) 00:18:29 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ebffe0a7df88a8283bb19b9d1da1b85c844736ba9c14e292442516cb681d9e25"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14000880}, 0x24000004) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000015) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x100000000000000}, 0x0) 00:18:29 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000280)={'custom0\x00'}) 00:18:29 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x48000) 00:18:29 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) syz_io_uring_setup(0x11b8, &(0x7f00000000c0)={0x0, 0xab96, 0x200, 0x3, 0x399}, &(0x7f0000000500), &(0x7f0000000540)=0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000600)=@IORING_OP_LINKAT={0x27, 0x3, 0x0, r4, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', r5, 0x400}) 00:18:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x200000000000000}, 0x0) 00:18:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r1, 0x311}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000280)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:29 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ebffe0a7df88a8283bb19b9d1da1b85c844736ba9c14e292442516cb681d9e25"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14000880}, 0x24000004) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000015) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:29 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x48000) 00:18:29 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) syz_io_uring_setup(0x11b8, &(0x7f00000000c0)={0x0, 0xab96, 0x200, 0x3, 0x399}, &(0x7f0000000500), &(0x7f0000000540)=0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000600)=@IORING_OP_LINKAT={0x27, 0x3, 0x0, r4, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', r5, 0x400}) 00:18:29 executing program 2: io_uring_setup(0x157e, &(0x7f0000000180)) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x300000000000000}, 0x0) 00:18:29 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ebffe0a7df88a8283bb19b9d1da1b85c844736ba9c14e292442516cb681d9e25"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14000880}, 0x24000004) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000015) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r1, 0x311}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000280)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r1, 0x311}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000280)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) (async) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) 00:18:29 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) syz_io_uring_setup(0x11b8, &(0x7f00000000c0)={0x0, 0xab96, 0x200, 0x3, 0x399}, &(0x7f0000000500), &(0x7f0000000540)=0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000600)=@IORING_OP_LINKAT={0x27, 0x3, 0x0, r4, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', r5, 0x400}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) syz_io_uring_setup(0x11b8, &(0x7f00000000c0)={0x0, 0xab96, 0x200, 0x3, 0x399}, &(0x7f0000000500), &(0x7f0000000540)) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000600)=@IORING_OP_LINKAT={0x27, 0x3, 0x0, r4, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='./file0\x00', r5, 0x400}) (async) 00:18:29 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x48000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc040}, 0x48000) (async) 00:18:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x400000000000000}, 0x0) 00:18:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r1, 0x311}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r3, 0x0, 0x42, &(0x7f0000000280)={'icmp\x00'}, &(0x7f00000002c0)=0x1e) (async) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:29 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x2e969962, 0x4d0e02) 00:18:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x500000000000000}, 0x0) 00:18:29 executing program 4: ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={0xfe01, 0x946, 0x7ff, 0x80, 0x8b, 0x22, 0x12, "0c81a2e30e45a1349700ae9b5796869503daefb8", "83a5aab8b48ae7019ce0b77938eef06c76e57c30"}) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180), &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000018c0)={0x1, 0x0, &(0x7f0000000840)=""/49, &(0x7f0000000880)=""/4096, &(0x7f0000001880)=""/38, 0x4000}) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0x800) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x244880) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000001900), &(0x7f0000001940)=0x4) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000800)={0x3f, 0x6}) 00:18:29 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x403002) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000500)="af56803f3adac6e53136c73a3fdde0553703316121d4da9787f45ca0855cae70690e64f3a4e3d40da8ebad5fb2772e15d4eb6a80d071c48ab2d90e309cd74c4f37592bc96578c66acaaa8100c0ee0dd3bfcca448e584c0520c4c8c95e9cf8e98892aaff199ac85a1a0ec56055a422824ea1310444ec9357f85eebfeb52553a", 0x7f) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x200080) r3 = socket(0x21, 0x80000, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000080), 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x3, 0x80000) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x5, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) 00:18:29 executing program 2: io_uring_setup(0x157e, &(0x7f0000000180)) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:29 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x2, 0x5}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) 00:18:29 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x2e969962, 0x4d0e02) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2e969962, 0x4d0e02) (async) 00:18:29 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x403002) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000500)="af56803f3adac6e53136c73a3fdde0553703316121d4da9787f45ca0855cae70690e64f3a4e3d40da8ebad5fb2772e15d4eb6a80d071c48ab2d90e309cd74c4f37592bc96578c66acaaa8100c0ee0dd3bfcca448e584c0520c4c8c95e9cf8e98892aaff199ac85a1a0ec56055a422824ea1310444ec9357f85eebfeb52553a", 0x7f) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x200080) (async) r3 = socket(0x21, 0x80000, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000080), 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x3, 0x80000) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x5, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) 00:18:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x600000000000000}, 0x0) 00:18:29 executing program 4: ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={0xfe01, 0x946, 0x7ff, 0x80, 0x8b, 0x22, 0x12, "0c81a2e30e45a1349700ae9b5796869503daefb8", "83a5aab8b48ae7019ce0b77938eef06c76e57c30"}) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180), &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000018c0)={0x1, 0x0, &(0x7f0000000840)=""/49, &(0x7f0000000880)=""/4096, &(0x7f0000001880)=""/38, 0x4000}) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0x800) (async, rerun: 64) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x244880) (rerun: 64) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000001900), &(0x7f0000001940)=0x4) (async) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000800)={0x3f, 0x6}) 00:18:29 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x2, 0x5}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) 00:18:29 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x2e969962, 0x4d0e02) 00:18:29 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x403002) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) write$char_usb(r1, &(0x7f0000000500)="af56803f3adac6e53136c73a3fdde0553703316121d4da9787f45ca0855cae70690e64f3a4e3d40da8ebad5fb2772e15d4eb6a80d071c48ab2d90e309cd74c4f37592bc96578c66acaaa8100c0ee0dd3bfcca448e584c0520c4c8c95e9cf8e98892aaff199ac85a1a0ec56055a422824ea1310444ec9357f85eebfeb52553a", 0x7f) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x200080) r3 = socket(0x21, 0x80000, 0x0) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000080), 0x4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000100), 0x3, 0x80000) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x5, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x403002) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) write$char_usb(r1, &(0x7f0000000500)="af56803f3adac6e53136c73a3fdde0553703316121d4da9787f45ca0855cae70690e64f3a4e3d40da8ebad5fb2772e15d4eb6a80d071c48ab2d90e309cd74c4f37592bc96578c66acaaa8100c0ee0dd3bfcca448e584c0520c4c8c95e9cf8e98892aaff199ac85a1a0ec56055a422824ea1310444ec9357f85eebfeb52553a", 0x7f) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x200080) (async) socket(0x21, 0x80000, 0x0) (async) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000080), 0x4) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000100), 0x3, 0x80000) (async) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x5, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x700000000000000}, 0x0) 00:18:29 executing program 4: ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={0xfe01, 0x946, 0x7ff, 0x80, 0x8b, 0x22, 0x12, "0c81a2e30e45a1349700ae9b5796869503daefb8", "83a5aab8b48ae7019ce0b77938eef06c76e57c30"}) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180), &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000018c0)={0x1, 0x0, &(0x7f0000000840)=""/49, &(0x7f0000000880)=""/4096, &(0x7f0000001880)=""/38, 0x4000}) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r2 = accept4$x25(0xffffffffffffffff, &(0x7f0000000780), &(0x7f00000007c0)=0x12, 0x800) (async) r3 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x244880) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000001900), &(0x7f0000001940)=0x4) ioctl$SIOCX25GCAUSEDIAG(r2, 0x89e6, &(0x7f0000000800)={0x3f, 0x6}) 00:18:29 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'binder0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x4, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e7304406ad0f5e1bf0575a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a706000000657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de10f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f777210300", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0x2}}, 0x18) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x900000000000000}, 0x0) 00:18:29 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0xffc, 0x482000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000000)={0x1}) 00:18:29 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x2, 0x5}) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder-control\x00', 0x800, 0x0) (async) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x2, 0x5}) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) 00:18:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="06000a00000000000c000600030000000300004b7e03942004270c4f2f37d2e81171e9e35a2f2cb11a6300fa36772452667a5f3a0983b2242d", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x11) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:29 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'binder0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x4, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e7304406ad0f5e1bf0575a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a706000000657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de10f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f777210300", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0x2}}, 0x18) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r2, 0x311}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="def96d30787f4288000000000000"], 0x14}}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r8, 0x311}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x81) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="c086ae9f77828d414a35eda4f353bbd944852248e83351647854719f2c77ace7f69b139d89634d0179067e0204d9fd4f6e5f31da5b3f21f4028c7769073a198d9a1418ff3899f4080b16efa15604d1d787aead49182639db57e98f97d593c8089990587e3ac2d4fa6741818ed4cd7aae23a499372e3514dca2b41f7e0427a5875988d47065c5066fe84bd3879103768fe7ba52d22a7213d8417d830158646b038260b9e93fdf5e64b91bad24f6960e97aa", @ANYRES16=r2, @ANYBLOB="000227bd7000ffdbdf252000000034002b800800020003000000080002000300000008000200030000000500040001000000050001003f000000080002000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000024002b8005000400000000000500040000000000050001000200000008000200030000000c000600020000000000000044002b8008000200020000000500040001000000080002000100000005000100b600000008000200020000000500010005000000050004000000000005000400010000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4001}, 0x20000001) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) 00:18:29 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'binder0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x4, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e7304406ad0f5e1bf0575a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a706000000657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de10f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f777210300", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0x2}}, 0x18) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'binder0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x4, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e7304406ad0f5e1bf0575a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a706000000657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de10f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f777210300", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r1, &(0x7f00000000c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0x2}}, 0x18) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="06000a00000000000c000600030000000300004b7e03942004270c4f2f37d2e81171e9e35a2f2cb11a6300fa36772452667a5f3a0983b2242d", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x11) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:29 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x4000000000000000}, 0x0) 00:18:29 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) write$damon_init_regions(r0, &(0x7f0000000240)={{' ', 0xffffffffffffffff}, {}, {' ', 0x5}}, 0x3f) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, &(0x7f0000000180)="79fdbde336dac60cb822ce9bf1a6309e2ce15bf6a011fc1d64a0f61405fc473e9a87ff30f9b69e2da5d2d5cac03e24d6a78a7e9eddf96ddc63e8ba08a232f7936ee9008520fda1c24a01406fb829e5a4b5aa6ca60cc66db9cb791cfc985cb39cdf5d5259b2366fbec9535d4508d7", 0x6e, 0x1, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x11, r0, 0x10000000) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000040)={'binder1\x00'}) 00:18:29 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r2, 0x311}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="def96d30787f4288000000000000"], 0x14}}, 0x40000) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r8, 0x311}, 0x14}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) (rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x81) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="c086ae9f77828d414a35eda4f353bbd944852248e83351647854719f2c77ace7f69b139d89634d0179067e0204d9fd4f6e5f31da5b3f21f4028c7769073a198d9a1418ff3899f4080b16efa15604d1d787aead49182639db57e98f97d593c8089990587e3ac2d4fa6741818ed4cd7aae23a499372e3514dca2b41f7e0427a5875988d47065c5066fe84bd3879103768fe7ba52d22a7213d8417d830158646b038260b9e93fdf5e64b91bad24f6960e97aa", @ANYRES16=r2, @ANYBLOB="000227bd7000ffdbdf252000000034002b800800020003000000080002000300000008000200030000000500040001000000050001003f000000080002000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000024002b8005000400000000000500040000000000050001000200000008000200030000000c000600020000000000000044002b8008000200020000000500040001000000080002000100000005000100b600000008000200020000000500010005000000050004000000000005000400010000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4001}, 0x20000001) (async, rerun: 32) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) 00:18:29 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="06000a00000000000c000600030000000300004b7e03942004270c4f2f37d2e81171e9e35a2f2cb11a6300fa36772452667a5f3a0983b2242d", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x11) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x220000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fcdbdf250b00000008000300", @ANYRES32=0x0, @ANYBLOB="06000a00000000000c000600030000000300004b7e03942004270c4f2f37d2e81171e9e35a2f2cb11a6300fa36772452667a5f3a0983b2242d", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x11) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) 00:18:30 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) write$damon_init_regions(r0, &(0x7f0000000240)={{' ', 0xffffffffffffffff}, {}, {' ', 0x5}}, 0x3f) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, &(0x7f0000000180)="79fdbde336dac60cb822ce9bf1a6309e2ce15bf6a011fc1d64a0f61405fc473e9a87ff30f9b69e2da5d2d5cac03e24d6a78a7e9eddf96ddc63e8ba08a232f7936ee9008520fda1c24a01406fb829e5a4b5aa6ca60cc66db9cb791cfc985cb39cdf5d5259b2366fbec9535d4508d7", 0x6e, 0x1, 0x1}) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x11, r0, 0x10000000) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000040)={'binder1\x00'}) 00:18:30 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0xffc, 0x482000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000000)={0x1}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_open_dev$mouse(&(0x7f0000001540), 0xffc, 0x482000) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000000)={0x1}) (async) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0xf0ffffff00000000}, 0x0) 00:18:30 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) accept$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000680)=0x10) syz_open_dev$mouse(&(0x7f0000000900), 0x8d4, 0x141000) r2 = syz_open_dev$mouse(&(0x7f0000000940), 0x1000, 0x381082) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000740)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x40000000000080, 0x9, 0x8, 0x10000, 0x7], 0x1, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000580)={'filter\x00', 0x0, 0x0, 0x0, [0x4a, 0x2, 0x4, 0x7, 0x101, 0x2], 0x7, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x7, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x3, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r5, 0x0, 0x1, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008011}, 0x10) recvfrom$inet(r4, &(0x7f0000000880)=""/48, 0x30, 0x2000, &(0x7f00000008c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) r6 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000800), 0x106, 0xb}}, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r7, 0x8001af71, &(0x7f0000000b40)) 00:18:30 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r2, 0x311}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="def96d30787f4288000000000000"], 0x14}}, 0x40000) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @local}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x2000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r7, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x1c, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r8, 0x311}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000004c0)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000500)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, r8, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x81) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="c086ae9f77828d414a35eda4f353bbd944852248e83351647854719f2c77ace7f69b139d89634d0179067e0204d9fd4f6e5f31da5b3f21f4028c7769073a198d9a1418ff3899f4080b16efa15604d1d787aead49182639db57e98f97d593c8089990587e3ac2d4fa6741818ed4cd7aae23a499372e3514dca2b41f7e0427a5875988d47065c5066fe84bd3879103768fe7ba52d22a7213d8417d830158646b038260b9e93fdf5e64b91bad24f6960e97aa", @ANYRES16=r2, @ANYBLOB="000227bd7000ffdbdf252000000034002b800800020003000000080002000300000008000200030000000500040001000000050001003f000000080002000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000000000024002b8005000400000000000500040000000000050001000200000008000200030000000c000600020000000000000044002b8008000200020000000500040001000000080002000100000005000100b600000008000200020000000500010005000000050004000000000005000400010000000c000600020000000000000008000300", @ANYRES32=0x0, @ANYBLOB], 0xec}, 0x1, 0x0, 0x0, 0x4001}, 0x20000001) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0xf3d9d5c900000000}, 0x0) 00:18:30 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) write$damon_init_regions(r0, &(0x7f0000000240)={{' ', 0xffffffffffffffff}, {}, {' ', 0x5}}, 0x3f) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, &(0x7f0000000180)="79fdbde336dac60cb822ce9bf1a6309e2ce15bf6a011fc1d64a0f61405fc473e9a87ff30f9b69e2da5d2d5cac03e24d6a78a7e9eddf96ddc63e8ba08a232f7936ee9008520fda1c24a01406fb829e5a4b5aa6ca60cc66db9cb791cfc985cb39cdf5d5259b2366fbec9535d4508d7", 0x6e, 0x1, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x11, r0, 0x10000000) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000040)={'binder1\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) write$damon_init_regions(r0, &(0x7f0000000240)={{' ', 0xffffffffffffffff}, {}, {' ', 0x5}}, 0x3f) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, &(0x7f0000000180)="79fdbde336dac60cb822ce9bf1a6309e2ce15bf6a011fc1d64a0f61405fc473e9a87ff30f9b69e2da5d2d5cac03e24d6a78a7e9eddf96ddc63e8ba08a232f7936ee9008520fda1c24a01406fb829e5a4b5aa6ca60cc66db9cb791cfc985cb39cdf5d5259b2366fbec9535d4508d7", 0x6e, 0x1, 0x1}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000008, 0x11, r0, 0x10000000) (async) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000040)={'binder1\x00'}) (async) 00:18:30 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0xffc, 0x482000) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000000)={0x1}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_open_dev$mouse(&(0x7f0000001540), 0xffc, 0x482000) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_VDPA_SET_GROUP_ASID(r0, 0x4008af7c, &(0x7f0000000000)={0x1}) (async) 00:18:30 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'veth0_macvtap\x00', 0x1, 0xf39}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = accept4$x25(r1, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ec0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f00000007c0)={0x6ac, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x23f0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbbf5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4da}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbbe0}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe8b}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf28b}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xd0b, 0x3, 0x7f}, {0x8, 0xff, 0xff, 0xfffffeff}, {0x4, 0x8, 0x5b, 0x6}, {0x9, 0x2, 0x5, 0xf04d}, {0x6, 0xf6, 0xff, 0x7}]}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x24000008}, 0x1) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:30 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) accept$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000680)=0x10) syz_open_dev$mouse(&(0x7f0000000900), 0x8d4, 0x141000) r2 = syz_open_dev$mouse(&(0x7f0000000940), 0x1000, 0x381082) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000740)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x40000000000080, 0x9, 0x8, 0x10000, 0x7], 0x1, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000580)={'filter\x00', 0x0, 0x0, 0x0, [0x4a, 0x2, 0x4, 0x7, 0x101, 0x2], 0x7, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x7, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x3, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 64) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r5, 0x0, 0x1, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008011}, 0x10) recvfrom$inet(r4, &(0x7f0000000880)=""/48, 0x30, 0x2000, &(0x7f00000008c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) r6 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000800), 0x106, 0xb}}, 0x2) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r7, 0x8001af71, &(0x7f0000000b40)) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0xffff20a50080ffff}, 0x0) 00:18:30 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) read$smackfs_cipsonum(r1, &(0x7f0000000040), 0x14) 00:18:30 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x1, 0xffc7, "2332aa4513514ffe1ded24249988bbfb7ea244e001eed7974e156123009a83f5a338552a393de3f574279138233f1cbd55d573bd24466becf34338389fc15853f92f11cf6727689c6e20e40b496a6e6ab4d4a7839f0484732a2c789530d6d90e6def560fc858b72a6e9ef66947837539fb98a5c428526bb14e4551e9144249be7b7b83a8aef613a25da1a07a6c9fda5ab6c4c60d6146e085b582e189bb37d30a86ab780a331e75db44978e03f369f79628b84f0546647489913b9ca9c1e1da855829395b828ad13199617cf220b5fc0f034f54f5270d9d1ae15ad582081d8d4f237b58fe0e7589678e16cf5cd5a795b0fd32b8cff006c742cb1a84f390b826d4", 0x6, 0x2, 0xe3, 0xaf, 0x9, 0x7, 0x8, 0x1}, r1}}, 0x120) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r1, 0x0, "cf42e0", "02dcc193f46a97832b18742b322e47250b1833f1e20e61e9f3cc2e8b99206d4cd5547f78fbad7139534fb6005ade5cdf0bf713923f52ee4c6f154c24d44703b7f6d1c4fc3a194a54423e5d23afaca84cb7f56c248d216ce6c8ef46916fad5b93f3db5490235a39cb3afec773efbdf4c2161838d61c8dbeb7726f29e354fdfe77cdaeb114128ce804bbcc82cf00bdf51bb55821511abdfb5125aac099de521af1fa75c92c59bd6e4a2dbad70f3576636f90892f4fe4107ed12ca30986efa643084fd905127a6f11abe5cf447f8648a404a5c5a9135514ce7212edf9abaa0aec9ebef3e84ecac4edba3ac1eb320069c9b2553657ccab3a5eec0eff5eb76ec1da09"}}, 0x110) 00:18:30 executing program 4: ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0x4004af77, &(0x7f0000000600)=0xffffbaba) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d0}, 0x4004000) syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x400000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0xd6, 0x43000) write$damon_init_regions(r4, &(0x7f0000000080)={{}, {' ', 0x101}, {' ', 0x8}}, 0x3f) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x64, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8805}, 0x2040000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) 00:18:30 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'veth0_macvtap\x00', 0x1, 0xf39}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = accept4$x25(r1, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ec0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f00000007c0)={0x6ac, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x23f0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbbf5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4da}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbbe0}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe8b}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf28b}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xd0b, 0x3, 0x7f}, {0x8, 0xff, 0xff, 0xfffffeff}, {0x4, 0x8, 0x5b, 0x6}, {0x9, 0x2, 0x5, 0xf04d}, {0x6, 0xf6, 0xff, 0x7}]}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x24000008}, 0x1) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:30 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async, rerun: 32) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (rerun: 32) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async, rerun: 32) read$smackfs_cipsonum(r1, &(0x7f0000000040), 0x14) (rerun: 32) 00:18:30 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x1, 0xffc7, "2332aa4513514ffe1ded24249988bbfb7ea244e001eed7974e156123009a83f5a338552a393de3f574279138233f1cbd55d573bd24466becf34338389fc15853f92f11cf6727689c6e20e40b496a6e6ab4d4a7839f0484732a2c789530d6d90e6def560fc858b72a6e9ef66947837539fb98a5c428526bb14e4551e9144249be7b7b83a8aef613a25da1a07a6c9fda5ab6c4c60d6146e085b582e189bb37d30a86ab780a331e75db44978e03f369f79628b84f0546647489913b9ca9c1e1da855829395b828ad13199617cf220b5fc0f034f54f5270d9d1ae15ad582081d8d4f237b58fe0e7589678e16cf5cd5a795b0fd32b8cff006c742cb1a84f390b826d4", 0x6, 0x2, 0xe3, 0xaf, 0x9, 0x7, 0x8, 0x1}, r1}}, 0x120) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r1, 0x0, "cf42e0", "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"}}, 0x110) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x13f, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x1, 0xffc7, "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", 0x6, 0x2, 0xe3, 0xaf, 0x9, 0x7, 0x8, 0x1}, r1}}, 0x120) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r1, 0x0, "cf42e0", "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"}}, 0x110) (async) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0xffff8000a520ffff}, 0x0) 00:18:30 executing program 4: ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0x4004af77, &(0x7f0000000600)=0xffffbaba) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d0}, 0x4004000) (async) syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x400000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x2, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0xd6, 0x43000) write$damon_init_regions(r4, &(0x7f0000000080)={{}, {' ', 0x101}, {' ', 0x8}}, 0x3f) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x64, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8805}, 0x2040000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) 00:18:30 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e1, &(0x7f0000000000)={'veth0_macvtap\x00', 0x1, 0xf39}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) r2 = accept4$x25(r1, &(0x7f0000000100), &(0x7f0000000140)=0x12, 0x80000) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000480)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x7, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000580)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000ec0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000e80)={&(0x7f00000007c0)={0x6ac, 0x0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{{0x8}, {0xe8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x23f0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8f}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}]}}, {{0x8, 0x1, r4}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbbf5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4da}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x168, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xbbe0}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xe8b}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xf28b}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0xd0b, 0x3, 0x7f}, {0x8, 0xff, 0xff, 0xfffffeff}, {0x4, 0x8, 0x5b, 0x6}, {0x9, 0x2, 0x5, 0xf04d}, {0x6, 0xf6, 0xff, 0x7}]}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x6ac}, 0x1, 0x0, 0x0, 0x24000008}, 0x1) (async) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:30 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) accept$inet(r1, &(0x7f0000000100)={0x2, 0x0, @loopback}, &(0x7f0000000680)=0x10) syz_open_dev$mouse(&(0x7f0000000900), 0x8d4, 0x141000) syz_open_dev$mouse(&(0x7f0000000940), 0x1000, 0x381082) (async) r2 = syz_open_dev$mouse(&(0x7f0000000940), 0x1000, 0x381082) setsockopt$EBT_SO_SET_COUNTERS(r2, 0x0, 0x81, &(0x7f0000000740)={'filter\x00', 0x0, 0x0, 0x0, [0x1, 0x40000000000080, 0x9, 0x8, 0x10000, 0x7], 0x1, &(0x7f00000006c0)=[{}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000580)={'filter\x00', 0x0, 0x0, 0x0, [0x4a, 0x2, 0x4, 0x7, 0x101, 0x2], 0x7, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}, {}, {}, {}]}, 0xe8) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x7, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x3, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r5, 0x0, 0x1, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}]}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2b, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008011}, 0x10) recvfrom$inet(r4, &(0x7f0000000880)=""/48, 0x30, 0x2000, &(0x7f00000008c0)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r6 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000980)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000800), 0x106, 0xb}}, 0x2) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r7, 0x8001af71, &(0x7f0000000b40)) (async) ioctl$VHOST_VDPA_GET_STATUS(r7, 0x8001af71, &(0x7f0000000b40)) 00:18:30 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) read$smackfs_cipsonum(r1, &(0x7f0000000040), 0x14) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) read$smackfs_cipsonum(r1, &(0x7f0000000040), 0x14) (async) 00:18:30 executing program 4: ioctl$VHOST_VDPA_SET_CONFIG_CALL(0xffffffffffffffff, 0x4004af77, &(0x7f0000000600)=0xffffbaba) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8d0}, 0x4004000) (async) syz_open_dev$mouse(&(0x7f00000000c0), 0x4, 0x400000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000040), 0xd6, 0x43000) write$damon_init_regions(r4, &(0x7f0000000080)={{}, {' ', 0x101}, {' ', 0x8}}, 0x3f) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), r1) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)={0x64, r6, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_TX_POWER={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8805}, 0x2040000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r2) 00:18:30 executing program 1: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1c2}, 0x40) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 00:18:30 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f00000000c0)={0x6, 0x118, 0xfa00, {{0x1, 0xffc7, "2332aa4513514ffe1ded24249988bbfb7ea244e001eed7974e156123009a83f5a338552a393de3f574279138233f1cbd55d573bd24466becf34338389fc15853f92f11cf6727689c6e20e40b496a6e6ab4d4a7839f0484732a2c789530d6d90e6def560fc858b72a6e9ef66947837539fb98a5c428526bb14e4551e9144249be7b7b83a8aef613a25da1a07a6c9fda5ab6c4c60d6146e085b582e189bb37d30a86ab780a331e75db44978e03f369f79628b84f0546647489913b9ca9c1e1da855829395b828ad13199617cf220b5fc0f034f54f5270d9d1ae15ad582081d8d4f237b58fe0e7589678e16cf5cd5a795b0fd32b8cff006c742cb1a84f390b826d4", 0x6, 0x2, 0xe3, 0xaf, 0x9, 0x7, 0x8, 0x1}, r1}}, 0x120) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r1, 0x0, "cf42e0", "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"}}, 0x110) 00:18:30 executing program 1: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1c2}, 0x40) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0xffffffff00000000}, 0x0) 00:18:30 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x3, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder0\x00'}) 00:18:30 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c40)={0x9, 0x0, [{0x0, 0xaf, &(0x7f0000001580)=""/175}, {0x10000, 0xec, &(0x7f0000001640)=""/236}, {0x0, 0xe8, &(0x7f0000001740)=""/232}, {0x100000, 0xca, &(0x7f0000001840)=""/202}, {0x1000, 0xc2, &(0x7f0000001940)=""/194}, {0x0, 0x4b, &(0x7f0000001a40)=""/75}, {0x3000, 0xac, &(0x7f0000001ac0)=""/172}, {0x2000, 0x80, &(0x7f0000001b80)=""/128}, {0x4000, 0x3c, &(0x7f0000001c00)=""/60}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001500)={0x3, 0x0, &(0x7f0000000500)=""/4096, &(0x7f00000000c0)=""/42, &(0x7f0000000100), 0x4}) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:30 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000040)={'pim6reg\x00', 0x5, 0x1ff}) 00:18:30 executing program 1: sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x8, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1c2}, 0x40) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x2}}, 0x18) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r4, r5}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x0) 00:18:30 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x3, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder0\x00'}) (async) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder0\x00'}) 00:18:30 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x48c00) 00:18:30 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c40)={0x9, 0x0, [{0x0, 0xaf, &(0x7f0000001580)=""/175}, {0x10000, 0xec, &(0x7f0000001640)=""/236}, {0x0, 0xe8, &(0x7f0000001740)=""/232}, {0x100000, 0xca, &(0x7f0000001840)=""/202}, {0x1000, 0xc2, &(0x7f0000001940)=""/194}, {0x0, 0x4b, &(0x7f0000001a40)=""/75}, {0x3000, 0xac, &(0x7f0000001ac0)=""/172}, {0x2000, 0x80, &(0x7f0000001b80)=""/128}, {0x4000, 0x3c, &(0x7f0000001c00)=""/60}]}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001500)={0x3, 0x0, &(0x7f0000000500)=""/4096, &(0x7f00000000c0)=""/42, &(0x7f0000000100), 0x4}) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c40)={0x9, 0x0, [{0x0, 0xaf, &(0x7f0000001580)=""/175}, {0x10000, 0xec, &(0x7f0000001640)=""/236}, {0x0, 0xe8, &(0x7f0000001740)=""/232}, {0x100000, 0xca, &(0x7f0000001840)=""/202}, {0x1000, 0xc2, &(0x7f0000001940)=""/194}, {0x0, 0x4b, &(0x7f0000001a40)=""/75}, {0x3000, 0xac, &(0x7f0000001ac0)=""/172}, {0x2000, 0x80, &(0x7f0000001b80)=""/128}, {0x4000, 0x3c, &(0x7f0000001c00)=""/60}]}) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001500)={0x3, 0x0, &(0x7f0000000500)=""/4096, &(0x7f00000000c0)=""/42, &(0x7f0000000100), 0x4}) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:30 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000040)={'pim6reg\x00', 0x5, 0x1ff}) 00:18:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x2}}, 0x18) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r4, r5}}, 0x18) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) 00:18:30 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f0000000040)={'pim6reg\x00', 0x5, 0x1ff}) 00:18:30 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x48c00) 00:18:30 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x2}}, 0x18) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r4, r5}}, 0x18) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_SET_OPTION(r1, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:30 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x3, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder0\x00'}) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x3}, 0x0) 00:18:30 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1bc, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd98a}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x48001}, 0x1) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:30 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async, rerun: 64) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async, rerun: 64) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000001c40)={0x9, 0x0, [{0x0, 0xaf, &(0x7f0000001580)=""/175}, {0x10000, 0xec, &(0x7f0000001640)=""/236}, {0x0, 0xe8, &(0x7f0000001740)=""/232}, {0x100000, 0xca, &(0x7f0000001840)=""/202}, {0x1000, 0xc2, &(0x7f0000001940)=""/194}, {0x0, 0x4b, &(0x7f0000001a40)=""/75}, {0x3000, 0xac, &(0x7f0000001ac0)=""/172}, {0x2000, 0x80, &(0x7f0000001b80)=""/128}, {0x4000, 0x3c, &(0x7f0000001c00)=""/60}]}) (async, rerun: 32) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000001500)={0x3, 0x0, &(0x7f0000000500)=""/4096, &(0x7f00000000c0)=""/42, &(0x7f0000000100), 0x4}) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:30 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x48c00) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x48c00) (async) 00:18:30 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x400, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 00:18:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x50dc00) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0xffffffff) 00:18:30 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1bc, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd98a}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x48001}, 0x1) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:30 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x1}}, 0x18) 00:18:30 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x400, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x400, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:30 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$damon_init_regions(r3, &(0x7f00000000c0)={{}, {' ', 0x8}, {' ', 0x7}}, 0x3f) 00:18:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x50dc00) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0xffffffff) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) 00:18:30 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1bc, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xd98a}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xa8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x48001}, 0x1) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:30 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x1}}, 0x18) 00:18:30 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x50dc00) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0xffffffff) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x0) 00:18:30 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x400, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:30 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) 00:18:30 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$damon_init_regions(r3, &(0x7f00000000c0)={{}, {' ', 0x8}, {' ', 0x7}}, 0x3f) 00:18:30 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_STATUS(r0, 0x8001af71, &(0x7f0000000000)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x8c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004}, 0x41) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:30 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x7}, 0x0) 00:18:30 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) 00:18:30 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, &(0x7f0000000040)={0x5, 0x10, 0xfa00, {&(0x7f0000000240), 0xffffffffffffffff, 0x1}}, 0x18) 00:18:30 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async, rerun: 32) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (rerun: 32) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$damon_init_regions(r3, &(0x7f00000000c0)={{}, {' ', 0x8}, {' ', 0x7}}, 0x3f) 00:18:30 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2e0, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xaa}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x278, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3, 0x40, 0x7, 0x5}, {0x1, 0x2, 0xae, 0x8}, {0x7, 0x6, 0x9, 0x1}, {0x7, 0x4, 0x0, 0x3}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_VDPA_GET_STATUS(r0, 0x8001af71, &(0x7f0000000000)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x8c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004}, 0x41) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) 00:18:31 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) 00:18:31 executing program 1: ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0x6, 0x8, [0x100, 0x7]}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000080)) 00:18:31 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2e0, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xaa}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x278, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3, 0x40, 0x7, 0x5}, {0x1, 0x2, 0xae, 0x8}, {0x7, 0x6, 0x9, 0x1}, {0x7, 0x4, 0x0, 0x3}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:31 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r6, r7}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x3, 0x15, "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", 0x40, 0x8, 0x7, 0x57, 0x6, 0x8, 0x3f}, r6}}, 0x120) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:31 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_VDPA_GET_STATUS(r0, 0x8001af71, &(0x7f0000000000)) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x8c, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'tunl0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @mcast1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4004}, 0x41) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x300}, 0x0) 00:18:31 executing program 1: ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0x6, 0x8, [0x100, 0x7]}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000080)) ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0x6, 0x8, [0x100, 0x7]}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000080)) (async) 00:18:31 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder-control\x00', 0x800, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008881) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:31 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder-control\x00', 0x800, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008881) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:31 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000340)=[{}], 0x8, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2e0, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xaa}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x278, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3, 0x40, 0x7, 0x5}, {0x1, 0x2, 0xae, 0x8}, {0x7, 0x6, 0x9, 0x1}, {0x7, 0x4, 0x0, 0x3}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000900)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000008c0)={&(0x7f00000005c0)={0x2e0, r2, 0x0, 0x70bd26, 0x25dfdbff, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xaa}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x278, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1f}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x3, 0x40, 0x7, 0x5}, {0x1, 0x2, 0xae, 0x8}, {0x7, 0x6, 0x9, 0x1}, {0x7, 0x4, 0x0, 0x3}]}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x4000004}, 0x8800) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:31 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) (async, rerun: 32) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r6, r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x3, 0x15, "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", 0x40, 0x8, 0x7, 0x57, 0x6, 0x8, 0x3f}, r6}}, 0x120) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x500}, 0x0) 00:18:31 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x37d441) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1f2b3505, 0x210000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x100) 00:18:31 executing program 1: ioctl$VHOST_GET_FEATURES(0xffffffffffffffff, 0x8008af00, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000040)={0x6, 0x8, [0x100, 0x7]}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000080)) 00:18:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) 00:18:31 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:31 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder-control\x00', 0x800, 0x0) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008881) (async, rerun: 32) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (rerun: 32) 00:18:31 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r6, r7}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x3, 0x15, "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", 0x40, 0x8, 0x7, 0x57, 0x6, 0x8, 0x3f}, r6}}, 0x120) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r6, r7}}, 0x18) (async) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x3, 0x15, "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", 0x40, 0x8, 0x7, 0x57, 0x6, 0x8, 0x3f}, r6}}, 0x120) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:31 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x37d441) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x37d441) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1f2b3505, 0x210000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x100) 00:18:31 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000180)=""/117, &(0x7f0000000240)=""/12, &(0x7f0000000280)=""/70, 0x10000}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000140), 0xf1c2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0xa00, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x20}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040805}, 0xc000) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80820801}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd27, 0x25dfdbfb, 0xffff0000, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4006) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000440)={0x3, r2}) 00:18:31 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x700}, 0x0) 00:18:31 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0x3000, 0x79, &(0x7f0000000100)=""/121}, {0x100000, 0x5, &(0x7f0000000180)=""/5}]}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000240)=""/105, &(0x7f00000002c0)=0x69) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000300)={'\x00', 0x7, 0xbb7}) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000000c0)={0x2, 0x80}) 00:18:31 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000600)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048000}, 0x4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) write$tcp_mem(r4, &(0x7f0000000280)={0x8, 0x20, 0x100000001, 0x20, 0xa1}, 0x48) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:31 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x37d441) (async, rerun: 64) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x1f2b3505, 0x210000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)=0x100) 00:18:31 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:31 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000180)=""/117, &(0x7f0000000240)=""/12, &(0x7f0000000280)=""/70, 0x10000}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000140), 0xf1c2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0xa00, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x20}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040805}, 0xc000) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80820801}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd27, 0x25dfdbfb, 0xffff0000, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4006) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000440)={0x3, r2}) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000180)=""/117, &(0x7f0000000240)=""/12, &(0x7f0000000280)=""/70, 0x10000}) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000140), 0xf1c2, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0xa00, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x20}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040805}, 0xc000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80820801}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd27, 0x25dfdbfb, 0xffff0000, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4006) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000440)={0x3, r2}) (async) 00:18:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x900}, 0x0) 00:18:31 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000600)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048000}, 0x4) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) (async) write$tcp_mem(r4, &(0x7f0000000280)={0x8, 0x20, 0x100000001, 0x20, 0xa1}, 0x48) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:31 executing program 4: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0x3000, 0x79, &(0x7f0000000100)=""/121}, {0x100000, 0x5, &(0x7f0000000180)=""/5}]}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000240)=""/105, &(0x7f00000002c0)=0x69) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000300)={'\x00', 0x7, 0xbb7}) (async) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000300)={'\x00', 0x7, 0xbb7}) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000000c0)={0x2, 0x80}) (async) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000000c0)={0x2, 0x80}) 00:18:31 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000180)=""/117, &(0x7f0000000240)=""/12, &(0x7f0000000280)=""/70, 0x10000}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000140), 0xf1c2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0xa00, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x20}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040805}, 0xc000) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80820801}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd27, 0x25dfdbfb, 0xffff0000, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4006) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000440)={0x3, r2}) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x3, 0x0, &(0x7f0000000180)=""/117, &(0x7f0000000240)=""/12, &(0x7f0000000280)=""/70, 0x10000}) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000140), 0xf1c2, 0x2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0xa00, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x20}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x7f}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040805}, 0xc000) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80820801}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@getspdinfo={0x14, 0x25, 0x200, 0x70bd27, 0x25dfdbfb, 0xffff0000, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4006) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000440)={0x3, r2}) (async) 00:18:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 00:18:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c001}, 0x20008081) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x3) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r5, 0x311}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20044040) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r8, 0x311}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x8080) 00:18:31 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000001c0)={0x2, 0x0, [{0x3000, 0x79, &(0x7f0000000100)=""/121}, {0x100000, 0x5, &(0x7f0000000180)=""/5}]}) (rerun: 64) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000000240)=""/105, &(0x7f00000002c0)=0x69) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000000300)={'\x00', 0x7, 0xbb7}) (async, rerun: 64) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f00000000c0)={0x2, 0x80}) (rerun: 64) 00:18:31 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30000}, 0x0) 00:18:31 executing program 0: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000600)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048000}, 0x4) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) write$tcp_mem(r4, &(0x7f0000000280)={0x8, 0x20, 0x100000001, 0x20, 0xa1}, 0x48) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:34 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 00:18:34 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048810) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x34000}, 0x0) 00:18:34 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000600), 0x20000000000002, 0x319380) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f00000005c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r4, 0x7fff}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:34 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x5c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000080) 00:18:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c001}, 0x20008081) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x3) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r5, 0x311}, 0x14}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20044040) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r8, 0x311}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x8080) 00:18:34 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 00:18:34 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000000600), 0x20000000000002, 0x319380) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f00000005c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r4, 0x7fff}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400300}, 0x0) 00:18:34 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048810) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:34 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x5c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000080) 00:18:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c001}, 0x20008081) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r0, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x7c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000010}, 0x3) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r5, 0x311}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x34, r5, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20044040) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r8, 0x311}, 0x14}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x38, r8, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x8080) 00:18:34 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000850}, 0x4048810) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:34 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) getsockopt$IPT_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 00:18:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1000000}, 0x0) 00:18:34 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x5c, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040080}, 0x4000080) 00:18:34 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000600), 0x20000000000002, 0x319380) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f00000005c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r4, 0x7fff}}, 0x18) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000000600), 0x20000000000002, 0x319380) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x13f, 0xa}}, 0x20) (async) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r3, &(0x7f00000005c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000500), r4, 0x7fff}}, 0x18) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:34 executing program 2: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff10000000ffff00001f0000007fb4454d00020000d7f701d384bf07b1fe6b07950c9c84bd4a9a971139b9217052689ccbc24b07933178e1fb8567555c60770083d6b6069e476eea8166982d515f2963940b7814bb342863a173dac6d98bb62eea5b53b39c043ced0fa9f57b563133adc010978f7d7f4ce01f093ed295b3cab00f28b3b8f56a0e3f055dcd0fbbdcae834ee7d4bd6105fad5d5027762fa6b82db8b3e5fa8f980973cd7a05d520e0405dfcccc1d5c12ad4ba086"]) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x5, 0x14, [0xffffffff, 0x9a, 0x5, 0xffffff70, 0x8]}) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) 00:18:34 executing program 1: getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000000)=""/98, &(0x7f0000000080)=0x62) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20008844}, 0x4040890) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000200000000b7b0000fdffffff001800000100000002000000ffffffff3f0000000100000092457acd2c5abc3cbc58b8f10b38"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 00:18:34 executing program 1: getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000000)=""/98, &(0x7f0000000080)=0x62) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20008844}, 0x4040890) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000200000000b7b0000fdffffff001800000100000002000000ffffffff3f0000000100000092457acd2c5abc3cbc58b8f10b38"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 00:18:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 00:18:34 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d0, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4801) socket$inet(0x2, 0x4, 0x4) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 00:18:34 executing program 2: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff10000000ffff00001f0000007fb4454d00020000d7f701d384bf07b1fe6b07950c9c84bd4a9a971139b9217052689ccbc24b07933178e1fb8567555c60770083d6b6069e476eea8166982d515f2963940b7814bb342863a173dac6d98bb62eea5b53b39c043ced0fa9f57b563133adc010978f7d7f4ce01f093ed295b3cab00f28b3b8f56a0e3f055dcd0fbbdcae834ee7d4bd6105fad5d5027762fa6b82db8b3e5fa8f980973cd7a05d520e0405dfcccc1d5c12ad4ba086"]) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x5, 0x14, [0xffffffff, 0x9a, 0x5, 0xffffff70, 0x8]}) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) (async) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) 00:18:34 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xfff, 0x40) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x802, 0x0) 00:18:34 executing program 1: getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, &(0x7f0000000000)=""/98, &(0x7f0000000080)=0x62) (async) sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16, @ANYBLOB="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"], 0x54}, 0x1, 0x0, 0x0, 0x20008844}, 0x4040890) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e000000200000000b7b0000fdffffff001800000100000002000000ffffffff3f0000000100000092457acd2c5abc3cbc58b8f10b38"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0x8, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) 00:18:34 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) 00:18:34 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000001, 0x42002) 00:18:34 executing program 2: ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffff10000000ffff00001f0000007fb4454d00020000d7f701d384bf07b1fe6b07950c9c84bd4a9a971139b9217052689ccbc24b07933178e1fb8567555c60770083d6b6069e476eea8166982d515f2963940b7814bb342863a173dac6d98bb62eea5b53b39c043ced0fa9f57b563133adc010978f7d7f4ce01f093ed295b3cab00f28b3b8f56a0e3f055dcd0fbbdcae834ee7d4bd6105fad5d5027762fa6b82db8b3e5fa8f980973cd7a05d520e0405dfcccc1d5c12ad4ba086"]) r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x5, 0x14, [0xffffffff, 0x9a, 0x5, 0xffffff70, 0x8]}) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) (async) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) 00:18:34 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xfff, 0x40) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x802, 0x0) 00:18:34 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async, rerun: 32) socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 00:18:34 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xffffffffffff86f9, 0x200102) write$UHID_INPUT2(r0, &(0x7f0000000040)={0xc, {0x26, "c3dac952f21ad58ef1ff0221da799402d2da6d348382d61db96017d5efacac6df6ef745911e8"}}, 0x2c) 00:18:34 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d0, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4801) (async, rerun: 64) socket$inet(0x2, 0x4, 0x4) (rerun: 64) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) (async, rerun: 32) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) (rerun: 32) 00:18:34 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xfff, 0x40) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x802, 0x0) 00:18:34 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000001, 0x42002) 00:18:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) 00:18:34 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xffffffffffff86f9, 0x200102) write$UHID_INPUT2(r0, &(0x7f0000000040)={0xc, {0x26, "c3dac952f21ad58ef1ff0221da799402d2da6d348382d61db96017d5efacac6df6ef745911e8"}}, 0x2c) 00:18:34 executing program 5: ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={'nicvf0\x00', 0x385c08e3, 0x4}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_online_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20000001) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:34 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000001, 0x42002) 00:18:34 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) r0 = syz_open_dev$mouse(&(0x7f0000000000), 0xffffffffffff86f9, 0x200102) write$UHID_INPUT2(r0, &(0x7f0000000040)={0xc, {0x26, "c3dac952f21ad58ef1ff0221da799402d2da6d348382d61db96017d5efacac6df6ef745911e8"}}, 0x2c) 00:18:34 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 00:18:36 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) socket$phonet_pipe(0x23, 0x5, 0x2) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:36 executing program 5: ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={'nicvf0\x00', 0x385c08e3, 0x4}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_online_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20000001) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:36 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_io_uring_setup(0x410a, &(0x7f0000000000)={0x0, 0xa9a3, 0x800, 0x3, 0x81}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000a40)) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)={0x8, 0x0, [{0x2, 0x91, &(0x7f0000000240)=""/145}, {0xd000, 0x52, &(0x7f0000000300)=""/82}, {0xf000, 0x39, &(0x7f0000000380)=""/57}, {0xd000, 0xf6, &(0x7f00000003c0)=""/246}, {0x1, 0xc2, &(0x7f00000004c0)=""/194}, {0x3000, 0xce, &(0x7f00000005c0)=""/206}, {0x5000, 0x6d, &(0x7f00000006c0)=""/109}, {0x1000, 0x5f, &(0x7f0000000740)=""/95}]}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x1d) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000009c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000900), 0xffffffffffffffff, 0x4}}, 0x18) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@nfc, 0x0, 0x80000}) 00:18:36 executing program 2: socket$inet(0x2, 0x2, 0xffff687e) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80800) accept4$x25(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x9, 0x180801) 00:18:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) 00:18:36 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d0, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r1}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20008000}, 0x4801) (async) socket$inet(0x2, 0x4, 0x4) (async) r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(r2, 0x541b, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) 00:18:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x9000000}, 0x0) 00:18:36 executing program 5: ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000040)={'nicvf0\x00', 0x385c08e3, 0x4}) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x26, 0x7, 'system_u:object_r:cpu_online_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20000001) (async) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r1, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:36 executing program 2: socket$inet(0x2, 0x2, 0xffff687e) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80800) accept4$x25(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x9, 0x180801) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x9, 0x180801) 00:18:36 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f00000000c0)}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:36 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async, rerun: 32) syz_io_uring_setup(0x410a, &(0x7f0000000000)={0x0, 0xa9a3, 0x800, 0x3, 0x81}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) (async, rerun: 32) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000a40)) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)={0x8, 0x0, [{0x2, 0x91, &(0x7f0000000240)=""/145}, {0xd000, 0x52, &(0x7f0000000300)=""/82}, {0xf000, 0x39, &(0x7f0000000380)=""/57}, {0xd000, 0xf6, &(0x7f00000003c0)=""/246}, {0x1, 0xc2, &(0x7f00000004c0)=""/194}, {0x3000, 0xce, &(0x7f00000005c0)=""/206}, {0x5000, 0x6d, &(0x7f00000006c0)=""/109}, {0x1000, 0x5f, &(0x7f0000000740)=""/95}]}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x1d) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000009c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000900), 0xffffffffffffffff, 0x4}}, 0x18) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@nfc, 0x0, 0x80000}) 00:18:36 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:36 executing program 2: socket$inet(0x2, 0x2, 0xffff687e) (async) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x80800) accept4$x25(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x12, 0x80000) (async, rerun: 32) syz_open_dev$sndctrl(&(0x7f0000000200), 0x9, 0x180801) (rerun: 32) 00:18:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) 00:18:36 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async, rerun: 64) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async, rerun: 64) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f00000000c0)}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:36 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) (async) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:36 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_io_uring_setup(0x410a, &(0x7f0000000000)={0x0, 0xa9a3, 0x800, 0x3, 0x81}, &(0x7f0000000080), &(0x7f00000000c0)=0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_VDPA_GET_VRING_NUM(r1, 0x8002af76, &(0x7f0000000a40)) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='./binderfs/binder-control\x00', 0x800, 0x0) (async) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000007c0)={0x8, 0x0, [{0x2, 0x91, &(0x7f0000000240)=""/145}, {0xd000, 0x52, &(0x7f0000000300)=""/82}, {0xf000, 0x39, &(0x7f0000000380)=""/57}, {0xd000, 0xf6, &(0x7f00000003c0)=""/246}, {0x1, 0xc2, &(0x7f00000004c0)=""/194}, {0x3000, 0xce, &(0x7f00000005c0)=""/206}, {0x5000, 0x6d, &(0x7f00000006c0)=""/109}, {0x1000, 0x5f, &(0x7f0000000740)=""/95}]}) (async) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x1d) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r2, &(0x7f00000009c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000900), 0xffffffffffffffff, 0x4}}, 0x18) (async) syz_io_uring_submit(0x0, r0, &(0x7f00000001c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r2, &(0x7f0000000100)=0x80, &(0x7f0000000140)=@nfc, 0x0, 0x80000}) 00:18:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc9d5d9f3}, 0x0) 00:18:36 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@null, 0xa, 'ipvlan1\x00'}) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) write$smackfs_cipso(r0, &(0x7f0000000100)={']!\xbc,/', 0x20, 0x81, 0x20, 0x7, 0x20, [{0xf}, {0xab}, {0x38}, {0x4}, {0xa9}, {0xa0}, {0x84}]}, 0xc4) 00:18:36 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f00000000c0)}, 0x10) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x7, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={r1, 0x58, &(0x7f00000000c0)}, 0x10) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:36 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x802, 0x0) ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000040)) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf2505000000080002000300000014000600ff01000000000000000000000000000108000c000200000006000b0000000000050001000000000006000b0090000000"], 0x50}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="51a52c0647490223c4be14930040", @ANYRES16=r9, @ANYBLOB="010c000000000000000003000000"], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x50000}, 0x40) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x38, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x200}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x68, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040}, 0x851) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000007c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r12, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$BINDER_CTL_ADD(r6, 0x541b, 0x0) 00:18:36 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async, rerun: 64) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@null, 0xa, 'ipvlan1\x00'}) (async, rerun: 64) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) write$smackfs_cipso(r0, &(0x7f0000000100)={']!\xbc,/', 0x20, 0x81, 0x20, 0x7, 0x20, [{0xf}, {0xab}, {0x38}, {0x4}, {0xa9}, {0xa0}, {0x84}]}, 0xc4) 00:18:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) 00:18:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0xc01}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x480200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c4}, 0x1) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)) 00:18:36 executing program 5: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:auditd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x8000) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@initdev, @empty}, &(0x7f0000000080)=0x8) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:36 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000040)) (async) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf2505000000080002000300000014000600ff01000000000000000000000000000108000c000200000006000b0000000000050001000000000006000b0090000000"], 0x50}}, 0x0) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="51a52c0647490223c4be14930040", @ANYRES16=r9, @ANYBLOB="010c000000000000000003000000"], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x50000}, 0x40) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x38, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x200}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x68, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040}, 0x851) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000007c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r12, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) ioctl$BINDER_CTL_ADD(r6, 0x541b, 0x0) 00:18:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xf3d9d5c9}, 0x0) 00:18:36 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:36 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@null, 0xa, 'ipvlan1\x00'}) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) write$smackfs_cipso(r0, &(0x7f0000000100)={']!\xbc,/', 0x20, 0x81, 0x20, 0x7, 0x20, [{0xf}, {0xab}, {0x38}, {0x4}, {0xa9}, {0xa0}, {0x84}]}, 0xc4) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000000)={@null, 0xa, 'ipvlan1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) write$smackfs_cipso(r0, &(0x7f0000000100)={']!\xbc,/', 0x20, 0x81, 0x20, 0x7, 0x20, [{0xf}, {0xab}, {0x38}, {0x4}, {0xa9}, {0xa0}, {0x84}]}, 0xc4) (async) 00:18:36 executing program 5: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:auditd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x8000) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@initdev, @empty}, &(0x7f0000000080)=0x8) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) 00:18:36 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) (async) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r2, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000040)) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002dbd7000fbdbdf2505000000080002000300000014000600ff01000000000000000000000000000108000c000200000006000b0000000000050001000000000006000b0090000000"], 0x50}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) (async) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r7) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="51a52c0647490223c4be14930040", @ANYRES16=r9, @ANYBLOB="010c000000000000000003000000"], 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=ANY=[@ANYBLOB="51a52c0647490223c4be14930040", @ANYRES16=r9, @ANYBLOB="010c000000000000000003000000"], 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r9, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x50000}, 0x40) syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r1) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r1) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000740)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xd0, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x28, 0x3}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x38, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x200}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x68, 0x29, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}]}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4040}, 0x851) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000007c0), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r11, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x68, r12, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'wpan0\x00'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$BINDER_CTL_ADD(r6, 0x541b, 0x0) 00:18:36 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:36 executing program 5: sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x58, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:auditd_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x21}}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x8000) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) getsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)={@initdev, @empty}, &(0x7f0000000080)=0x8) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) 00:18:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) (async) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0xc01}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x480200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c4}, 0x1) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)) 00:18:36 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x12, 0x80000) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x80000001, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0x6) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000080), 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x3, 0x1, &(0x7f0000000040)=""/5, &(0x7f0000000240)=""/80, &(0x7f00000002c0)=""/4096, 0xf000}) prctl$PR_SET_PTRACER(0x59616d61, r2) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r2, 0x12) 00:18:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 00:18:36 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000280)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) write$6lowpan_control(r1, &(0x7f00000002c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @initdev}, &(0x7f0000000200)=0x8) syz_io_uring_setup(0x3831, &(0x7f00000000c0)={0x0, 0x3061, 0x20, 0x1, 0x271, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000140)) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000180)) 00:18:36 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x12, 0x80000) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x80000001, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0x6) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0x6) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000080), 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x3, 0x1, &(0x7f0000000040)=""/5, &(0x7f0000000240)=""/80, &(0x7f00000002c0)=""/4096, 0xf000}) prctl$PR_SET_PTRACER(0x59616d61, r2) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r2, 0x12) 00:18:36 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) r6 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, 0x0, 0x0) r7 = accept4$x25(r6, &(0x7f0000000500), &(0x7f0000000540)=0x12, 0x800) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r4, 0x420, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040060}, 0x200000c1) openat$cgroup_int(r2, &(0x7f00000002c0)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) r8 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000e00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000980)={0x42c, r8, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x81, 0x5, 0x20}, {0x101, 0x1f, 0x2, 0xe9}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe39}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xffff, 0x7, 0xdf, 0x5}, {0x0, 0x0, 0x2, 0x7e66cf5d}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x42c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8011) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000100)) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000040)) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r11 = socket(0x2b, 0x5, 0x270) ioctl$SIOCX25SDTEFACILITIES(r11, 0x89eb, &(0x7f0000000300)={0x8, 0x2, 0x101, 0xff, 0x5, 0x15, 0x1f, "b43acd97527b0ca4daffc4fa42d128dd064e4438", "cf27f5d6e2247466d9312639d2edc79a8a4340af"}) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) 00:18:36 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0xb11ba31c46ec9cf5}}, 0x18) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x2) 00:18:36 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000280)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) write$6lowpan_control(r1, &(0x7f00000002c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @initdev}, &(0x7f0000000200)=0x8) (rerun: 64) syz_io_uring_setup(0x3831, &(0x7f00000000c0)={0x0, 0x3061, 0x20, 0x1, 0x271, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000140)) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000180)) 00:18:36 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0xb11ba31c46ec9cf5}}, 0x18) (async, rerun: 32) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async, rerun: 32) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000100)) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (rerun: 64) 00:18:36 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x12, 0x80000) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x80000001, 0x800) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0x6) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000100)=0x6) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000080), 0x4) (async) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000080), 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x3, 0x1, &(0x7f0000000040)=""/5, &(0x7f0000000240)=""/80, &(0x7f00000002c0)=""/4096, 0xf000}) prctl$PR_SET_PTRACER(0x59616d61, r2) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140)=r2, 0x12) 00:18:36 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000280)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) write$6lowpan_control(r1, &(0x7f00000002c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @initdev}, &(0x7f0000000200)=0x8) syz_io_uring_setup(0x3831, &(0x7f00000000c0)={0x0, 0x3061, 0x20, 0x1, 0x271, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000140)) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000180)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x2, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) write$6lowpan_control(r1, &(0x7f0000000280)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) write$6lowpan_control(r1, &(0x7f00000002c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f00000001c0)={@multicast2, @initdev}, &(0x7f0000000200)=0x8) (async) syz_io_uring_setup(0x3831, &(0x7f00000000c0)={0x0, 0x3061, 0x20, 0x1, 0x271, 0x0, r2}, &(0x7f0000000000), &(0x7f0000000140)) (async) ioctl$VHOST_VDPA_GET_DEVICE_ID(r2, 0x8004af70, &(0x7f0000000180)) (async) 00:18:36 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0xc01}, 0x14}}, 0x0) (async) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x480200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c4}, 0x1) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000100)) 00:18:36 executing program 5: openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r6 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, 0x0, 0x0) r7 = accept4$x25(r6, &(0x7f0000000500), &(0x7f0000000540)=0x12, 0x800) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r4, 0x420, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040060}, 0x200000c1) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r4, 0x420, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040060}, 0x200000c1) openat$cgroup_int(r2, &(0x7f00000002c0)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000005c0), r6) (async) r8 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), r6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000e00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000980)={0x42c, r8, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x81, 0x5, 0x20}, {0x101, 0x1f, 0x2, 0xe9}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe39}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xffff, 0x7, 0xdf, 0x5}, {0x0, 0x0, 0x2, 0x7e66cf5d}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x42c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8011) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000100)) (async) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000100)) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000040)) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r11 = socket(0x2b, 0x5, 0x270) ioctl$SIOCX25SDTEFACILITIES(r11, 0x89eb, &(0x7f0000000300)={0x8, 0x2, 0x101, 0xff, 0x5, 0x15, 0x1f, "b43acd97527b0ca4daffc4fa42d128dd064e4438", "cf27f5d6e2247466d9312639d2edc79a8a4340af"}) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) 00:18:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x3) 00:18:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x4) 00:18:36 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:36 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async, rerun: 64) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) (async, rerun: 32) r6 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (rerun: 32) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, 0x0, 0x0) r7 = accept4$x25(r6, &(0x7f0000000500), &(0x7f0000000540)=0x12, 0x800) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, r4, 0x420, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040060}, 0x200000c1) openat$cgroup_int(r2, &(0x7f00000002c0)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) (async) r8 = syz_genetlink_get_family_id$team(&(0x7f00000005c0), r6) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r6, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000006c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000900)=0x0, &(0x7f0000000940)=0x4) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000e00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000980)={0x42c, r8, 0x8, 0x70bd2c, 0x25dfdbff, {}, [{{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r9}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r10}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff0000}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x2, 0x81, 0x5, 0x20}, {0x101, 0x1f, 0x2, 0xe9}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe39}}}]}}, {{0x8}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0xffff, 0x7, 0xdf, 0x5}, {0x0, 0x0, 0x2, 0x7e66cf5d}]}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x42c}, 0x1, 0x0, 0x0, 0x4008001}, 0x8011) (async, rerun: 32) ioctl$VHOST_VDPA_GET_VRING_GROUP(r1, 0xc008af7b, &(0x7f0000000100)) (async, rerun: 32) ioctl$VHOST_VDPA_GET_DEVICE_ID(0xffffffffffffffff, 0x8004af70, &(0x7f0000000040)) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) r11 = socket(0x2b, 0x5, 0x270) ioctl$SIOCX25SDTEFACILITIES(r11, 0x89eb, &(0x7f0000000300)={0x8, 0x2, 0x101, 0xff, 0x5, 0x15, 0x1f, "b43acd97527b0ca4daffc4fa42d128dd064e4438", "cf27f5d6e2247466d9312639d2edc79a8a4340af"}) (async) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/cipso\x00', 0x2, 0x0) 00:18:36 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x5) [ 1116.947227][ T6170] ================================================================== [ 1116.949524][ T6170] BUG: KASAN: slab-use-after-free in hci_send_acl+0x54/0xc48 [ 1116.951508][ T6170] Read of size 8 at addr ffff0000d5f9e018 by task kworker/0:4/6170 [ 1116.953663][ T6170] [ 1116.954280][ T6170] CPU: 0 PID: 6170 Comm: kworker/0:4 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 1116.956858][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 1116.959639][ T6170] Workqueue: events l2cap_info_timeout [ 1116.961133][ T6170] Call trace: [ 1116.962023][ T6170] dump_backtrace+0x1b8/0x1e4 [ 1116.963307][ T6170] show_stack+0x2c/0x44 [ 1116.964402][ T6170] dump_stack_lvl+0xd0/0x124 [ 1116.965616][ T6170] print_report+0x174/0x514 [ 1116.966825][ T6170] kasan_report+0xd8/0x138 [ 1116.968045][ T6170] __asan_report_load8_noabort+0x20/0x2c [ 1116.969646][ T6170] hci_send_acl+0x54/0xc48 [ 1116.970887][ T6170] l2cap_send_cmd+0x52c/0x76c 00:18:36 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x7, 0x101, 0x40, 0x7, 0x6, 0x13, 0x1, "db7b328d55760f20ef7d623c84c2c4d758283c38", "7a9050dd0725e2b0c0f747ae658e398c3beec1c7"}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x40000) 00:18:36 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f0000000500), 0xffffffffffffffff, 0xb11ba31c46ec9cf5}}, 0x18) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_VDPA_GET_AS_NUM(r1, 0x8004af7a, &(0x7f0000000100)) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) [ 1116.972175][ T6170] l2cap_send_conn_req+0x188/0x2c4 [ 1116.973565][ T6170] l2cap_start_connection+0x118/0x2fc [ 1116.975053][ T6170] l2cap_conn_start+0x928/0xd8c [ 1116.976398][ T6170] l2cap_info_timeout+0x68/0xb8 [ 1116.977789][ T6170] process_one_work+0x694/0x1204 [ 1116.979157][ T6170] worker_thread+0x938/0xef4 [ 1116.980433][ T6170] kthread+0x288/0x310 [ 1116.981554][ T6170] ret_from_fork+0x10/0x20 [ 1116.982846][ T6170] [ 1116.983470][ T6170] Allocated by task 31268: [ 1116.984798][ T6170] kasan_set_track+0x4c/0x7c [ 1116.986027][ T6170] kasan_save_alloc_info+0x24/0x30 [ 1116.987417][ T6170] __kasan_kmalloc+0xac/0xc4 [ 1116.988654][ T6170] kmalloc_trace+0x70/0x88 [ 1116.989834][ T6170] hci_chan_create+0xb0/0x2b0 [ 1116.991061][ T6170] l2cap_conn_add+0x78/0x998 [ 1116.992368][ T6170] l2cap_chan_connect+0x5bc/0xce4 [ 1116.993703][ T6170] lowpan_control_write+0x4e8/0x824 [ 1116.995152][ T6170] full_proxy_write+0x110/0x1f8 [ 1116.996523][ T6170] vfs_write+0x2a0/0x93c [ 1116.997713][ T6170] ksys_write+0x15c/0x26c [ 1116.999001][ T6170] __arm64_sys_write+0x7c/0x90 [ 1117.000369][ T6170] invoke_syscall+0x98/0x2b8 [ 1117.001642][ T6170] el0_svc_common+0x130/0x23c [ 1117.002950][ T6170] do_el0_svc+0x48/0x58 [ 1117.004111][ T6170] el0_svc+0x54/0x158 [ 1117.005231][ T6170] el0t_64_sync_handler+0x84/0xfc [ 1117.006614][ T6170] el0t_64_sync+0x190/0x194 [ 1117.007851][ T6170] [ 1117.008482][ T6170] Freed by task 6117: [ 1117.009602][ T6170] kasan_set_track+0x4c/0x7c [ 1117.010869][ T6170] kasan_save_free_info+0x38/0x5c [ 1117.012275][ T6170] ____kasan_slab_free+0x144/0x1c0 [ 1117.013668][ T6170] __kasan_slab_free+0x18/0x28 [ 1117.015024][ T6170] __kmem_cache_free+0x2ac/0x480 [ 1117.016399][ T6170] kfree+0xb8/0x19c [ 1117.017434][ T6170] hci_chan_del+0x148/0x1c4 [ 1117.018668][ T6170] hci_conn_del+0x3cc/0xabc [ 1117.019920][ T6170] hci_conn_failed+0x204/0x2c0 [ 1117.021244][ T6170] hci_abort_conn_sync+0x688/0xe38 [ 1117.022685][ T6170] abort_conn_sync+0x5c/0x8c [ 1117.023956][ T6170] hci_cmd_sync_work+0x1cc/0x34c [ 1117.025361][ T6170] process_one_work+0x694/0x1204 [ 1117.026721][ T6170] worker_thread+0x938/0xef4 [ 1117.027979][ T6170] kthread+0x288/0x310 [ 1117.029102][ T6170] ret_from_fork+0x10/0x20 [ 1117.030336][ T6170] [ 1117.030948][ T6170] Last potentially related work creation: [ 1117.032529][ T6170] kasan_save_stack+0x40/0x6c [ 1117.033843][ T6170] __kasan_record_aux_stack+0xcc/0xe8 [ 1117.035367][ T6170] kasan_record_aux_stack_noalloc+0x14/0x20 [ 1117.036972][ T6170] kvfree_call_rcu+0xac/0x674 [ 1117.038232][ T6170] dev_addr_flush+0x13c/0x1d4 [ 1117.039497][ T6170] free_netdev+0x1a8/0x41c [ 1117.040691][ T6170] netdev_run_todo+0xc6c/0xe08 [ 1117.041985][ T6170] rtnl_unlock+0x14/0x20 [ 1117.043150][ T6170] ip_tunnel_delete_nets+0x2b8/0x308 [ 1117.044626][ T6170] ipgre_exit_batch_net+0x30/0x40 [ 1117.046015][ T6170] cleanup_net+0x5dc/0x8d0 [ 1117.047248][ T6170] process_one_work+0x694/0x1204 [ 1117.048661][ T6170] worker_thread+0x938/0xef4 [ 1117.049949][ T6170] kthread+0x288/0x310 [ 1117.051036][ T6170] ret_from_fork+0x10/0x20 [ 1117.052262][ T6170] [ 1117.052885][ T6170] Second to last potentially related work creation: [ 1117.054696][ T6170] kasan_save_stack+0x40/0x6c [ 1117.056043][ T6170] __kasan_record_aux_stack+0xcc/0xe8 [ 1117.057591][ T6170] kasan_record_aux_stack_noalloc+0x14/0x20 [ 1117.059247][ T6170] kvfree_call_rcu+0xac/0x674 [ 1117.060602][ T6170] dev_addr_flush+0x13c/0x1d4 [ 1117.061931][ T6170] free_netdev+0x1a8/0x41c [ 1117.063177][ T6170] netdev_run_todo+0xc6c/0xe08 [ 1117.064507][ T6170] rtnl_unlock+0x14/0x20 [ 1117.065670][ T6170] ip6gre_exit_batch_net+0x3f8/0x444 [ 1117.067130][ T6170] cleanup_net+0x5dc/0x8d0 [ 1117.068378][ T6170] process_one_work+0x694/0x1204 [ 1117.069694][ T6170] worker_thread+0x938/0xef4 [ 1117.071000][ T6170] kthread+0x288/0x310 [ 1117.072111][ T6170] ret_from_fork+0x10/0x20 [ 1117.073351][ T6170] [ 1117.074006][ T6170] The buggy address belongs to the object at ffff0000d5f9e000 [ 1117.074006][ T6170] which belongs to the cache kmalloc-128 of size 128 [ 1117.077967][ T6170] The buggy address is located 24 bytes inside of 00:18:37 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x3300) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) 00:18:37 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000880), 0x2, 0x800) read$char_usb(r0, &(0x7f00000008c0)=""/251, 0xfb) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000400), 0x3, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e23, 0xd9ae, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)) syz_io_uring_setup(0x2593, &(0x7f0000000000)={0x0, 0x2ccc, 0x200, 0x3, 0x2002df}, &(0x7f0000000080)=0x0, &(0x7f00000009c0)=0x0) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4080813, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000100)="840b90c6f831dd08737900a503973ffe612a68de72d0ddca85089244230d1b710a9f60721ba696c4d92aabba4ce49053ebb75c48d88d7d9924548ad15b2644fd523b0beb157dd1316fcd68efe6f37106e537b433cc92cdcda1843e39223e96d1be65c20d8de6c9e3", 0x68}) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_RENAMEAT={0x23, 0x77, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000680)) r6 = io_uring_setup(0x2b2, &(0x7f00000002c0)={0x0, 0x341f, 0x80, 0x4, 0x216}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r10, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000006c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000740)={0x9, 0x108, 0xfa00, {r12, 0x8, "3b827b", "bd01ebb683e1f5559f94a4e339a11ac30ed1865fef5082c0ec3097b1b7a729a4341ca5158d7175d028554f948ab09132ecd7cc8538a3dce4b8afc536c6a750e6b300d2ff106af41e9e5831576358ba05192e923d3541733805de4758b018bb654ce00513bd0c086391680ba54d00b18e51d9f5828d6a415db2afb21baac62fec41eaa505b98db85746a5f15beb135be982c5abefa65090b771b21da37dca0785556eeafdcc1383979e77566a8cf374b7e96bc2272fab80a1ca78996f84df0aecc0271ec08ae9620a10ac931489c19cd82eb0f0a03b6a63372523d244e200f2c5ddf449152ce170155ca2c95d2064bae439d8fb231ddf6d1f57200426b1f7d9ca"}}, 0x110) io_uring_setup(0x30b3, &(0x7f0000000340)={0x0, 0x3311, 0x500, 0xfffffffd, 0x240, 0x0, r6}) syz_open_dev$char_usb(0xc, 0xb4, 0x6b) [ 1117.077967][ T6170] freed 128-byte region [ffff0000d5f9e000, ffff0000d5f9e080) [ 1117.081805][ T6170] [ 1117.082431][ T6170] The buggy address belongs to the physical page: [ 1117.084175][ T6170] page:00000000bbb71fdc refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000d5f9ee00 pfn:0x115f9e [ 1117.087382][ T6170] flags: 0x5ffc00000000800(slab|node=0|zone=2|lastcpupid=0x7ff) [ 1117.089523][ T6170] page_type: 0xffffffff() [ 1117.090705][ T6170] raw: 05ffc00000000800 ffff0000c00018c0 fffffc0003c26350 fffffc00032bc9d0 [ 1117.093071][ T6170] raw: ffff0000d5f9ee00 0000000000100005 00000001ffffffff 0000000000000000 [ 1117.095488][ T6170] page dumped because: kasan: bad access detected [ 1117.097244][ T6170] [ 1117.097878][ T6170] Memory state around the buggy address: [ 1117.099439][ T6170] ffff0000d5f9df00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1117.101681][ T6170] ffff0000d5f9df80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1117.103946][ T6170] >ffff0000d5f9e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1117.106126][ T6170] ^ [ 1117.107449][ T6170] ffff0000d5f9e080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1117.109736][ T6170] ffff0000d5f9e100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1117.111939][ T6170] ================================================================== 00:18:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x6) [ 1117.155935][ T6170] Disabling lock debugging due to kernel taint 00:18:37 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:37 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x3300) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) 00:18:37 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x7, 0x101, 0x40, 0x7, 0x6, 0x13, 0x1, "db7b328d55760f20ef7d623c84c2c4d758283c38", "7a9050dd0725e2b0c0f747ae658e398c3beec1c7"}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x40000) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x40000) 00:18:37 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x7) 00:18:37 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x800, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x3300) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x3300) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f0000000040)) 00:18:39 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x7, 0x101, 0x40, 0x7, 0x6, 0x13, 0x1, "db7b328d55760f20ef7d623c84c2c4d758283c38", "7a9050dd0725e2b0c0f747ae658e398c3beec1c7"}) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x40000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) ioctl$SIOCX25SDTEFACILITIES(0xffffffffffffffff, 0x89eb, &(0x7f0000000000)={0x7, 0x101, 0x40, 0x7, 0x6, 0x13, 0x1, "db7b328d55760f20ef7d623c84c2c4d758283c38", "7a9050dd0725e2b0c0f747ae658e398c3beec1c7"}) (async) syz_open_dev$sndctrl(&(0x7f0000000040), 0x7, 0x40000) (async) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder-control\x00', 0x800, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:39 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000800)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x10, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x4e0000) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x0, {"f2f89d5889ffc28e2d6eaf961b9b39f1"}, 0x4, 0x1, 0xc0000000000000}}}, 0xa0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000680)={'broute\x00', 0x0, 0x0, 0x0, [0x3c172266, 0xffff, 0x80000001, 0x7, 0x1000, 0x1000], 0x1, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x9) 00:18:39 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000880), 0x2, 0x800) read$char_usb(r0, &(0x7f00000008c0)=""/251, 0xfb) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000400), 0x3, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e23, 0xd9ae, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}}, 0xa0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) (async) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)) (async) syz_io_uring_setup(0x2593, &(0x7f0000000000)={0x0, 0x2ccc, 0x200, 0x3, 0x2002df}, &(0x7f0000000080)=0x0, &(0x7f00000009c0)=0x0) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4080813, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000100)="840b90c6f831dd08737900a503973ffe612a68de72d0ddca85089244230d1b710a9f60721ba696c4d92aabba4ce49053ebb75c48d88d7d9924548ad15b2644fd523b0beb157dd1316fcd68efe6f37106e537b433cc92cdcda1843e39223e96d1be65c20d8de6c9e3", 0x68}) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_RENAMEAT={0x23, 0x77, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x1}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000680)) (async) r6 = io_uring_setup(0x2b2, &(0x7f00000002c0)={0x0, 0x341f, 0x80, 0x4, 0x216}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r10, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x880) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000006c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000740)={0x9, 0x108, 0xfa00, {r12, 0x8, "3b827b", "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"}}, 0x110) (async) io_uring_setup(0x30b3, &(0x7f0000000340)={0x0, 0x3311, 0x500, 0xfffffffd, 0x240, 0x0, r6}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x6b) 00:18:39 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = socket$inet(0x2, 0x6, 0x6) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) 00:18:39 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000880), 0x2, 0x800) read$char_usb(r0, &(0x7f00000008c0)=""/251, 0xfb) (async) read$char_usb(r0, &(0x7f00000008c0)=""/251, 0xfb) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r2, &(0x7f0000000440)={0x16, 0x98, 0xfa00, {&(0x7f0000000400), 0x3, 0xffffffffffffffff, 0x30, 0x1, @in6={0xa, 0x4e23, 0xd9ae, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}}}, 0xa0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111}}, 0x20) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000003c0)) syz_io_uring_setup(0x2593, &(0x7f0000000000)={0x0, 0x2ccc, 0x200, 0x3, 0x2002df}, &(0x7f0000000080)=0x0, &(0x7f00000009c0)=0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4080813, 0xffffffffffffffff, 0x10000000) (async) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2, 0x4080813, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r3, r5, &(0x7f0000000180)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000100)="840b90c6f831dd08737900a503973ffe612a68de72d0ddca85089244230d1b710a9f60721ba696c4d92aabba4ce49053ebb75c48d88d7d9924548ad15b2644fd523b0beb157dd1316fcd68efe6f37106e537b433cc92cdcda1843e39223e96d1be65c20d8de6c9e3", 0x68}) syz_io_uring_submit(r3, r4, &(0x7f0000000280)=@IORING_OP_RENAMEAT={0x23, 0x77, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x1}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000680)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000680)) io_uring_setup(0x2b2, &(0x7f00000002c0)={0x0, 0x341f, 0x80, 0x4, 0x216}) (async) r6 = io_uring_setup(0x2b2, &(0x7f00000002c0)={0x0, 0x341f, 0x80, 0x4, 0x216}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x14, r10, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x880) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r9, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000006c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000740)={0x9, 0x108, 0xfa00, {r12, 0x8, "3b827b", "bd01ebb683e1f5559f94a4e339a11ac30ed1865fef5082c0ec3097b1b7a729a4341ca5158d7175d028554f948ab09132ecd7cc8538a3dce4b8afc536c6a750e6b300d2ff106af41e9e5831576358ba05192e923d3541733805de4758b018bb654ce00513bd0c086391680ba54d00b18e51d9f5828d6a415db2afb21baac62fec41eaa505b98db85746a5f15beb135be982c5abefa65090b771b21da37dca0785556eeafdcc1383979e77566a8cf374b7e96bc2272fab80a1ca78996f84df0aecc0271ec08ae9620a10ac931489c19cd82eb0f0a03b6a63372523d244e200f2c5ddf449152ce170155ca2c95d2064bae439d8fb231ddf6d1f57200426b1f7d9ca"}}, 0x110) (async) write$RDMA_USER_CM_CMD_REJECT(r2, &(0x7f0000000740)={0x9, 0x108, 0xfa00, {r12, 0x8, "3b827b", "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"}}, 0x110) io_uring_setup(0x30b3, &(0x7f0000000340)={0x0, 0x3311, 0x500, 0xfffffffd, 0x240, 0x0, r6}) (async) io_uring_setup(0x30b3, &(0x7f0000000340)={0x0, 0x3311, 0x500, 0xfffffffd, 0x240, 0x0, r6}) syz_open_dev$char_usb(0xc, 0xb4, 0x6b) 00:18:39 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x50000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x1, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}}}, 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000040)={0x0, 0x7e}) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x300) 00:18:39 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000800)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x10, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) (rerun: 64) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x4e0000) (rerun: 64) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x0, {"f2f89d5889ffc28e2d6eaf961b9b39f1"}, 0x4, 0x1, 0xc0000000000000}}}, 0xa0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000680)={'broute\x00', 0x0, 0x0, 0x0, [0x3c172266, 0xffff, 0x80000001, 0x7, 0x1000, 0x1000], 0x1, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) (rerun: 64) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (rerun: 64) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x500) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000040)={0x0, 0x7e}) 00:18:39 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x50000) (async, rerun: 64) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (rerun: 64) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async, rerun: 32) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x1, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}}}, 0x38) (rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 00:18:39 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = socket$inet(0x2, 0x6, 0x6) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) 00:18:39 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000740)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000780)=[0x0], &(0x7f00000007c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000800)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x10, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f00000000c0), 0x9, 0x4e0000) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f0000000100), 0x4, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x0, {"f2f89d5889ffc28e2d6eaf961b9b39f1"}, 0x4, 0x1, 0xc0000000000000}}}, 0xa0) (async) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f0000000680)={'broute\x00', 0x0, 0x0, 0x0, [0x3c172266, 0xffff, 0x80000001, 0x7, 0x1000, 0x1000], 0x1, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}]}, 0x88) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:39 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f00000001c0)) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',@\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2000c804) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) ioctl$VHOST_SET_VRING_NUM(0xffffffffffffffff, 0x4008af10, &(0x7f0000000040)={0x0, 0x7e}) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x600) 00:18:39 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async, rerun: 32) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (rerun: 32) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f00000001c0)) (async, rerun: 64) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',@\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2000c804) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) (async) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 00:18:39 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) r1 = socket$inet(0x2, 0x6, 0x6) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x5452, &(0x7f0000000140)={'binder1\x00'}) (async) socket$inet(0x2, 0x6, 0x6) (async) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) (async) 00:18:39 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000640), 0xfffffff000000000, 0x800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r3}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000880)={0x6, 0x118, 0xfa00, {{0x4000000, 0xfff, "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", 0x1f, 0x8, 0x9, 0xae, 0x5, 0x8, 0x3f}, r6}}, 0x120) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r9, r10}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000006c0)={0x9, 0x108, 0xfa00, {r9, 0x1f, "45b360", "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"}}, 0x110) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'custom1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) write$6lowpan_control(r1, &(0x7f0000000680)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:18:39 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x50000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r0, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {&(0x7f0000000100), 0x1, {0xa, 0x4e20, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xfff}}}, 0x38) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) sendmsg$NLBL_MGMT_C_VERSION(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x18}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x29}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x700) 00:18:39 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1ffffffffffff, 0x0) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) 00:18:39 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000000640), 0xfffffff000000000, 0x800) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r3}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) (async) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000880)={0x6, 0x118, 0xfa00, {{0x4000000, 0xfff, "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", 0x1f, 0x8, 0x9, 0xae, 0x5, 0x8, 0x3f}, r6}}, 0x120) (async) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r9, r10}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000006c0)={0x9, 0x108, 0xfa00, {r9, 0x1f, "45b360", "68056b831217231022ae9aa911d839824e104dfdf71305ed453bd4a710a6d45ca1c1b0d3e2a9b493b355a5bf3f54dabe6638c97b120e53d4f7b8ada34cc56d4c39510a6e2facb63e1a690b63accfb2cb7aabbe1b9cf8943fe72a951b160dfad11565aded874259f8e9f8ae7fcf2c381fefc3d449a6aca7832aaa3626b3df4d7935ba5907f86902e2b46c37fde6b4af9d930481bf966c0ef9c96d5332354f90496376573028701a29610e62b6e4fee00eb05f5a4c1894f8c4dfad0984b00bd77eb7e72ecb742361f5abbe522c555a78472635a93ef277ab0d5e4e3d818e24a919b5bbb79588fc581ccda14729f4fca32ef958eee11a3f469b2fc450fe31215057"}}, 0x110) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'custom1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) write$6lowpan_control(r1, &(0x7f0000000680)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:18:39 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r0, 0x8010af78, &(0x7f00000001c0)) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, ',@\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2000c804) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) (async) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x900) 00:18:39 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000640), 0xfffffff000000000, 0x800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r3}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000880)={0x6, 0x118, 0xfa00, {{0x4000000, 0xfff, "c9878aa552e71b4f2da0ae49e5cbf755a31ea386f1b9e7c909c2e2e957f50c5bc0807dea7391ee9252a6daf399a37652418670554928ab304c08eb8a7d553eef02ef7116ff382cc99d7a4b3fe28923dd86fbefe80508bb86af7740be364d5cdabc31387d523111fc79a3076ef6cff54bef870b96fa6072bf037e1b715f6c6437e56688b9874f6c9de02237d4c09f4ef6dba1335234ecbc4022cb4cbd672523135bb83027f8e81acfa642c795cd33fe1a269baf33ad8ac7b237d1d6c3f39fd617fec25e8f1debdd5d70bc770e4ec61789529fb809857099249ef7525cf714cf5cc53fb53537e6020d886e095f98e4128fcffc99fc85df657b51a8ca988951e105", 0x1f, 0x8, 0x9, 0xae, 0x5, 0x8, 0x3f}, r6}}, 0x120) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r9, r10}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000006c0)={0x9, 0x108, 0xfa00, {r9, 0x1f, "45b360", "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"}}, 0x110) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'custom1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) write$6lowpan_control(r1, &(0x7f0000000680)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:18:39 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1ffffffffffff, 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1ffffffffffff, 0x0) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x4000) 00:18:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x8000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3, r1}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:39 executing program 1: mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x2010, 0xffffffffffffffff, 0x10000000) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1ffffffffffff, 0x0) 00:18:39 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000640), 0xfffffff000000000, 0x800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r3}, 0x18) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000880)={0x6, 0x118, 0xfa00, {{0x4000000, 0xfff, "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", 0x1f, 0x8, 0x9, 0xae, 0x5, 0x8, 0x3f}, r6}}, 0x120) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) (async) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r9, r10}}, 0x18) (async) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000006c0)={0x9, 0x108, 0xfa00, {r9, 0x1f, "45b360", "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"}}, 0x110) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'custom1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) write$6lowpan_control(r1, &(0x7f0000000680)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, &(0x7f0000000080)=0x10) (async) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x30000) 00:18:39 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000640), 0xfffffff000000000, 0x800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r3}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000880)={0x6, 0x118, 0xfa00, {{0x4000000, 0xfff, "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", 0x1f, 0x8, 0x9, 0xae, 0x5, 0x8, 0x3f}, r6}}, 0x120) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r9, r10}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000006c0)={0x9, 0x108, 0xfa00, {r9, 0x1f, "45b360", "68056b831217231022ae9aa911d839824e104dfdf71305ed453bd4a710a6d45ca1c1b0d3e2a9b493b355a5bf3f54dabe6638c97b120e53d4f7b8ada34cc56d4c39510a6e2facb63e1a690b63accfb2cb7aabbe1b9cf8943fe72a951b160dfad11565aded874259f8e9f8ae7fcf2c381fefc3d449a6aca7832aaa3626b3df4d7935ba5907f86902e2b46c37fde6b4af9d930481bf966c0ef9c96d5332354f90496376573028701a29610e62b6e4fee00eb05f5a4c1894f8c4dfad0984b00bd77eb7e72ecb742361f5abbe522c555a78472635a93ef277ab0d5e4e3d818e24a919b5bbb79588fc581ccda14729f4fca32ef958eee11a3f469b2fc450fe31215057"}}, 0x110) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'custom1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) write$6lowpan_control(r1, &(0x7f0000000680)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x3f, 0x79e1207d, 0x4, 0x9, 0x80000001, 0xffffffff], 0x2, &(0x7f0000000040)=[{}, {}, {}], 0x0, [{}, {}]}, 0x98) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x8000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3, r1}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x8000) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3, r1}) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) 00:18:39 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000000640), 0xfffffff000000000, 0x800) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x18, r3}, 0x18) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000840)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000800)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r5, &(0x7f0000000880)={0x6, 0x118, 0xfa00, {{0x4000000, 0xfff, "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", 0x1f, 0x8, 0x9, 0xae, 0x5, 0x8, 0x3f}, r6}}, 0x120) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r8, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r9, r10}}, 0x18) write$RDMA_USER_CM_CMD_REJECT(r4, &(0x7f00000006c0)={0x9, 0x108, 0xfa00, {r9, 0x1f, "45b360", "68056b831217231022ae9aa911d839824e104dfdf71305ed453bd4a710a6d45ca1c1b0d3e2a9b493b355a5bf3f54dabe6638c97b120e53d4f7b8ada34cc56d4c39510a6e2facb63e1a690b63accfb2cb7aabbe1b9cf8943fe72a951b160dfad11565aded874259f8e9f8ae7fcf2c381fefc3d449a6aca7832aaa3626b3df4d7935ba5907f86902e2b46c37fde6b4af9d930481bf966c0ef9c96d5332354f90496376573028701a29610e62b6e4fee00eb05f5a4c1894f8c4dfad0984b00bd77eb7e72ecb742361f5abbe522c555a78472635a93ef277ab0d5e4e3d818e24a919b5bbb79588fc581ccda14729f4fca32ef958eee11a3f469b2fc450fe31215057"}}, 0x110) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000500)={'custom1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0), 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2d, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) write$6lowpan_control(r1, &(0x7f0000000680)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:18:39 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = socket(0x1f, 0x1, 0xf5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x412, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x34000) 00:18:39 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) accept4$inet(r2, &(0x7f0000000500)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x800) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r5, r6}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000580)={0xf, 0x8, 0xfa00, {r5, 0x1}}, 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x20, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x1, 0x0, 0x1}) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x3f, 0x79e1207d, 0x4, 0x9, 0x80000001, 0xffffffff], 0x2, &(0x7f0000000040)=[{}, {}, {}], 0x0, [{}, {}]}, 0x98) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x3f, 0x79e1207d, 0x4, 0x9, 0x80000001, 0xffffffff], 0x2, &(0x7f0000000040)=[{}, {}, {}], 0x0, [{}, {}]}, 0x98) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x3f, 0x79e1207d, 0x4, 0x9, 0x80000001, 0xffffffff], 0x2, &(0x7f0000000040)=[{}, {}, {}], 0x0, [{}, {}]}, 0x98) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x400300) 00:18:39 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) socket(0x1f, 0x1, 0xf5) (async) r0 = socket(0x1f, 0x1, 0xf5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x412, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) 00:18:39 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) accept4$inet(r2, &(0x7f0000000500)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x800) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r5, r6}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000580)={0xf, 0x8, 0xfa00, {r5, 0x1}}, 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x20, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x1, 0x0, 0x1}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) accept4$inet(r2, &(0x7f0000000500)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x800) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r5, r6}}, 0x18) (async) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000580)={0xf, 0x8, 0xfa00, {r5, 0x1}}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x20, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x1, 0x0, 0x1}) (async) 00:18:39 executing program 5: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) accept4$inet(r2, &(0x7f0000000500)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x800) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r5, r6}}, 0x18) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000580)={0xf, 0x8, 0xfa00, {r5, 0x1}}, 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x20, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x1, 0x0, 0x1}) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:39 executing program 2: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x8000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3, r1}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$mouse(&(0x7f0000000040), 0x2, 0x8000) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3, r1}) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) 00:18:39 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = socket(0x1f, 0x1, 0xf5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x412, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) (async) socket(0x1f, 0x1, 0xf5) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x412, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) (async) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x1000000) 00:18:39 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) accept4$inet(r2, &(0x7f0000000500)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x800) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r3, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f00000001c0)={0x12, 0x10, 0xfa00, {0x0, r5, r6}}, 0x18) (async) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000580)={0xf, 0x8, 0xfa00, {r5, 0x1}}, 0x10) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_LINK_TIMEOUT={0xf, 0x20, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x77359400}, 0x1, 0x0, 0x1}) 00:18:39 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = socket(0x1f, 0x1, 0xf5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x412, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:39 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10, 0x1800) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:39 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:39 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x2000000) 00:18:39 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = socket(0x1f, 0x1, 0xf5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x412, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) 00:18:39 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x3000000) 00:18:40 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x2, 0x8, [0xfffff001, 0x400]}) 00:18:40 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10, 0x1800) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:40 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:40 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'custom0\x00'}) io_uring_setup(0x20000000, &(0x7f0000000180)={0x0, 0x1294}) r1 = syz_open_dev$mouse(&(0x7f0000000300), 0x200, 0x200000) accept4$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10, 0x80800) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x0, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000240)='io.bfq.weight\x00', 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 00:18:40 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = socket(0x1f, 0x1, 0xf5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x412, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) 00:18:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x4000000) 00:18:40 executing program 1: accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @private}, &(0x7f0000000040)=0x10, 0x1800) (async) syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) 00:18:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x5000000) 00:18:40 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x2, 0x8, [0xfffff001, 0x400]}) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x2, 0x8, [0xfffff001, 0x400]}) (async) 00:18:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x22}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xfffbb6c0fadd6105}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000004) syz_open_dev$sndctrl(&(0x7f0000000100), 0x2000000000000, 0x10000) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@null, 0xc, 'veth0_to_team\x00'}) 00:18:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x6000000) 00:18:40 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = socket(0x1f, 0x1, 0xf5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x412, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, 0x0, 0x0) 00:18:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x7000000) 00:18:40 executing program 2: syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r0 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)={0x2, 0x8, [0xfffff001, 0x400]}) 00:18:40 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder-control\x00', 0x0, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "dddc57390c6fcce020c858460144bb85d582a46bb96e730421b60d32de0744e0a9c403aaa3a20f4fbb05cef43de71ffec954e31a2351c0cf35662beaa6121a91c3d819e5cbb36ad9fb42820d6fe353df94996424e17ea260e213a1230bb136a719d2e4dd657ed6278295f1736335b8da030ab780775017d5c4b419234125032d871148794553d0ea0ce0f26535f3aeba9d93636da994741c529074611becfadea74b1cf9da75ddd9d8aa955f26143ac7b6f3d2ccbc3bb29d89d06e2fa86790ce8eba234a7da9b05f1b0415ce2bdce9ebec41eb515ee6fb4bc8cbe37de50f0de94b5c6d4d3c936aeaeea6e252390275e7de05136ca482dfde107de886f7772103", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) (async) 00:18:40 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'custom0\x00'}) io_uring_setup(0x20000000, &(0x7f0000000180)={0x0, 0x1294}) (async) io_uring_setup(0x20000000, &(0x7f0000000180)={0x0, 0x1294}) r1 = syz_open_dev$mouse(&(0x7f0000000300), 0x200, 0x200000) accept4$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10, 0x80800) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x0, 0x1}) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000240)='io.bfq.weight\x00', 0x2, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000240)='io.bfq.weight\x00', 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) 00:18:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x22}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xfffbb6c0fadd6105}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000004) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x2000000000000, 0x10000) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@null, 0xc, 'veth0_to_team\x00'}) 00:18:40 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = socket(0x1f, 0x1, 0xf5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x412, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) 00:18:40 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x88d8}, 0x40000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x2) 00:18:40 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x22}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xfffbb6c0fadd6105}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000004) syz_open_dev$sndctrl(&(0x7f0000000100), 0x2000000000000, 0x10000) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@null, 0xc, 'veth0_to_team\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) (async) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0x22}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xfffbb6c0fadd6105}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x2c}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000004) (async) syz_open_dev$sndctrl(&(0x7f0000000100), 0x2000000000000, 0x10000) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async) ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000000)={@null, 0xc, 'veth0_to_team\x00'}) (async) 00:18:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x9000000) 00:18:40 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000540)={0x3, 0x8}) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:40 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x88d8}, 0x40000) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x2) 00:18:40 executing program 4: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'custom0\x00'}) io_uring_setup(0x20000000, &(0x7f0000000180)={0x0, 0x1294}) r1 = syz_open_dev$mouse(&(0x7f0000000300), 0x200, 0x200000) accept4$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10, 0x80800) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x0, 0x1}) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) openat$cgroup_int(r2, &(0x7f0000000240)='io.bfq.weight\x00', 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) (async) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000040)={'custom0\x00'}) (async) io_uring_setup(0x20000000, &(0x7f0000000180)={0x0, 0x1294}) (async) syz_open_dev$mouse(&(0x7f0000000300), 0x200, 0x200000) (async) accept4$inet(r1, &(0x7f0000000340)={0x2, 0x0, @dev}, &(0x7f0000000380)=0x10, 0x80800) (async) ioctl$BINDER_CTL_ADD(r0, 0x541b, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x40, 0x0, 0x0, 0x1, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x0, 0x1}) (async) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) (async) openat$cgroup_int(r2, &(0x7f0000000240)='io.bfq.weight\x00', 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) (async) 00:18:40 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = socket(0x1f, 0x1, 0xf5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x412, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) r2 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, 0x0, 0x0) 00:18:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0x40000000) 00:18:40 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0x5b7640) 00:18:40 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x88d8}, 0x40000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000000)=0x2) 00:18:40 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = socket(0x1f, 0x1, 0xf5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x412, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) 00:18:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0xc9d5d9f3) 00:18:40 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0x5b7640) 00:18:40 executing program 0: r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000280)={'custom0\x00'}) ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000140)={'binder1\x00'}) (async) r1 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (async) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000540)={0x3, 0x8}) (async) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f00000003c0)={0x8, 0x120, 0xfa00, {0x3, {0x3, 0x9, "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", 0x1, 0x1, 0x2, 0x2, 0x81, 0x7, 0x7f}}}, 0x128) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, 0x0, 0x0) (async, rerun: 64) r4 = syz_open_dev$mouse(&(0x7f0000001540), 0x0, 0x0) (rerun: 64) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000040)) 00:18:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a00)={'wpan1\x00'}) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x30}}, 0x4000010) syz_open_dev$sndctrl(&(0x7f0000000200), 0x0, 0x10000) 00:18:40 executing program 1: syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0x5b7640) syz_open_dev$sndctrl(&(0x7f0000000000), 0x2000000000000, 0x5b7640) (async) 00:18:40 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = socket(0x1f, 0x1, 0xf5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x412, 0x70bd2d, 0x25dfdbfc, {}, [{{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x80}, 0x8010) 00:18:40 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x20}}, 0xf0ffffff) 00:18:40 executing program 4: syz_open_dev$sndctrl(&(0x7f0000000200), 0x2000000000000, 0x10000) r0 = socket(0x1f, 0x1, 0xf5) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0x