5, @ANYBLOB="c115c3870008b55e27510389207d22261dbf4c3cc97cbfd669f8279525b7e11846d5ef9104c58ce09323d48835099b7e08a4d1305aa3e865684cbf70d18a1ebc7e00cc56bbde3866765106511a0a35f1939cbdb40d1a438c9f2cd449bc09a230b5fa179baf68d4d5951102cd0797e0775bbfeb6a77c049bc127800582ad3ccefc3a006b1bbe0c035f6d1638274d407d9008b7f67f0dfbc8f2d6bad122ce8d7c0bcfccf8484087f7adccfcdc5f81ba3ed09bb1476d491f4fa66248fe4302528bc"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000007000000080003000000", @ANYRES32=r7, @ANYBLOB="08000500000000000a0004007770616e33000000"], 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c084}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x48, r11, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x74}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r15, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80810}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r16, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r12, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r16, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x10) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:41:55 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891c, 0x0) 00:41:55 executing program 4: write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x24) syz_usb_connect$cdc_ncm(0x6, 0x8b, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0x1, 0x10, 0x74, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0xfa2b, 0xd77, 0xff}, {0x6, 0x24, 0x1a, 0x401, 0x10}, [@obex={0x5, 0x24, 0x15, 0x626d}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1f}, @mdlm_detail={0xb, 0x24, 0x13, 0x0, "e3bbab51ec0bcb"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x7, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x11, 0x0, 0xe1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xc0, 0x1f, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x81, 0x3b, 0x7d}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x3f, 0x60, 0x6, 0x40, 0x4}, 0x3f, &(0x7f0000000180)={0x5, 0xf, 0x3f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x93, 0x0, 0xffff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x4e, 0x3f, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0xc, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "074f7a621c2cfdaf4987e5a7c9ac9ff6"}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x81d}}, {0x52, &(0x7f0000000240)=@string={0x52, 0x3, "4c4a12fd688b3e7a787222066c6aabf0170d486a4bc2dab41ae2201c82c7fcdcb6415196f314c29658d9577404ff14abeed40eba0d4e9ea1353b509c7d73010db0233f4a28a116b3fb3afb6bc91603aa"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}]}) 00:41:55 executing program 1: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r1) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x81) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40), 0xc, &(0x7f0000000d00)={&(0x7f00000007c0)={0x20, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xffffff0d, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x8084) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r4) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="c115c3870008b55e27510389207d22261dbf4c3cc97cbfd669f8279525b7e11846d5ef9104c58ce09323d48835099b7e08a4d1305aa3e865684cbf70d18a1ebc7e00cc56bbde3866765106511a0a35f1939cbdb40d1a438c9f2cd449bc09a230b5fa179baf68d4d5951102cd0797e0775bbfeb6a77c049bc127800582ad3ccefc3a006b1bbe0c035f6d1638274d407d9008b7f67f0dfbc8f2d6bad122ce8d7c0bcfccf8484087f7adccfcdc5f81ba3ed09bb1476d491f4fa66248fe4302528bc"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000007000000080003000000", @ANYRES32=r7, @ANYBLOB="08000500000000000a0004007770616e33000000"], 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c084}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x48, r11, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x74}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r15, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80810}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) (async) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r16, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r12, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r16, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x10) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:41:55 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 00:41:55 executing program 1: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:55 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:55 executing program 1: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x1, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) 00:41:55 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891c, 0x0) 00:41:55 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 00:41:55 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r1) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x2c, r2, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x81) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40), 0xc, &(0x7f0000000d00)={&(0x7f00000007c0)={0x20, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xffffff0d, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000001}, 0x8084) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r4) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f00000006c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="c115c3870008b55e27510389207d22261dbf4c3cc97cbfd669f8279525b7e11846d5ef9104c58ce09323d48835099b7e08a4d1305aa3e865684cbf70d18a1ebc7e00cc56bbde3866765106511a0a35f1939cbdb40d1a438c9f2cd449bc09a230b5fa179baf68d4d5951102cd0797e0775bbfeb6a77c049bc127800582ad3ccefc3a006b1bbe0c035f6d1638274d407d9008b7f67f0dfbc8f2d6bad122ce8d7c0bcfccf8484087f7adccfcdc5f81ba3ed09bb1476d491f4fa66248fe4302528bc"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000007000000080003000000", @ANYRES32=r7, @ANYBLOB="08000500000000000a0004007770616e33000000"], 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r5, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c084}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r10, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x48, r11, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x74}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r12, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r15, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80810}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r16, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc}]}, 0x20}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r12, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r16, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x10) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:41:56 executing program 4: write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x24) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 2', 0x24) syz_usb_connect$cdc_ncm(0x6, 0x8b, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x79, 0x2, 0x1, 0x1, 0x10, 0x74, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x10001, 0xfa2b, 0xd77, 0xff}, {0x6, 0x24, 0x1a, 0x401, 0x10}, [@obex={0x5, 0x24, 0x15, 0x626d}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x1f}, @mdlm_detail={0xb, 0x24, 0x13, 0x0, "e3bbab51ec0bcb"}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x7, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x11, 0x0, 0xe1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xc0, 0x1f, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x81, 0x3b, 0x7d}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x0, 0x3f, 0x60, 0x6, 0x40, 0x4}, 0x3f, &(0x7f0000000180)={0x5, 0xf, 0x3f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x93, 0x0, 0xffff}, @wireless={0xb, 0x10, 0x1, 0xc, 0x11, 0x4e, 0x3f, 0x5, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0xd, 0xc, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "074f7a621c2cfdaf4987e5a7c9ac9ff6"}]}, 0x5, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x81d}}, {0x52, &(0x7f0000000240)=@string={0x52, 0x3, "4c4a12fd688b3e7a787222066c6aabf0170d486a4bc2dab41ae2201c82c7fcdcb6415196f314c29658d9577404ff14abeed40eba0d4e9ea1353b509c7d73010db0233f4a28a116b3fb3afb6bc91603aa"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x820}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x427}}]}) 00:41:56 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:56 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) close$fd_v4l2_buffer(0xffffffffffffffff) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000000)={0x6, {0x29, 0x1, 0x1, 0xf8}}) 00:41:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891b, 0x0) 00:41:56 executing program 2: socketpair(0xa, 0x5, 0x1, &(0x7f0000000040)) 00:41:56 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891a, 0x0) 00:41:56 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:56 executing program 0: write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:56 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891a, 0x0) 00:41:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891b, 0x0) 00:41:56 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) close$fd_v4l2_buffer(0xffffffffffffffff) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000000)={0x6, {0x29, 0x1, 0x1, 0xf8}}) 00:41:56 executing program 2: socketpair(0xa, 0x5, 0x1, &(0x7f0000000040)) 00:41:56 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891a, 0x0) 00:41:56 executing program 0: write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:56 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891b, 0x0) 00:41:56 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) close$fd_v4l2_buffer(0xffffffffffffffff) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000000)={0x6, {0x29, 0x1, 0x1, 0xf8}}) 00:41:56 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4826a2, 0x0) syz_io_uring_setup(0x3407, &(0x7f0000000100)={0x0, 0x66ad, 0x800, 0x3, 0x33a, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000180)) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:56 executing program 2: socketpair(0xa, 0x5, 0x1, &(0x7f0000000040)) 00:41:56 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4826a2, 0x0) syz_io_uring_setup(0x3407, &(0x7f0000000100)={0x0, 0x66ad, 0x800, 0x3, 0x33a, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000180)) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4826a2, 0x0) (async) syz_io_uring_setup(0x3407, &(0x7f0000000100)={0x0, 0x66ad, 0x800, 0x3, 0x33a, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000180)) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) 00:41:56 executing program 0: write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:56 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891a, 0x0) 00:41:56 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891b, 0x0) 00:41:56 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:56 executing program 1: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$video(&(0x7f0000000040), 0x5, 0x80000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000180)={0x4af6a7b3, "a7a702d025b0e13f3fe5190600c5ef8e4a0996ca431319deacf62e4c0e7e6d7e", 0x200, 0xb56f, 0x0, 0x2, 0x3}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x2523e46dd7c33467, {0x40, 0x1ff, 0x3, 0x7ff}, {0xffff, 0x1, 0x7, 0x8}, {0xfffffff9, 0x100}}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e21, 0x7, @mcast1, 0x2}, {0xa, 0x4e22, 0x1ff, @local, 0x3ff}, 0x0, {[0x100, 0x8000, 0x9, 0xfffffffd, 0xc, 0x9, 0x6, 0x9]}}, 0x5c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x802, 0x0) 00:41:56 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4826a2, 0x0) syz_io_uring_setup(0x3407, &(0x7f0000000100)={0x0, 0x66ad, 0x800, 0x3, 0x33a, 0x0, r1}, &(0x7f0000000040), &(0x7f0000000180)) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:56 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891a, 0x0) 00:41:56 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891b, 0x0) 00:41:56 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:56 executing program 1: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$video(&(0x7f0000000040), 0x5, 0x80000) (async) r0 = syz_open_dev$video(&(0x7f0000000040), 0x5, 0x80000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000180)={0x4af6a7b3, "a7a702d025b0e13f3fe5190600c5ef8e4a0996ca431319deacf62e4c0e7e6d7e", 0x200, 0xb56f, 0x0, 0x2, 0x3}) (async) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000180)={0x4af6a7b3, "a7a702d025b0e13f3fe5190600c5ef8e4a0996ca431319deacf62e4c0e7e6d7e", 0x200, 0xb56f, 0x0, 0x2, 0x3}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x2523e46dd7c33467, {0x40, 0x1ff, 0x3, 0x7ff}, {0xffff, 0x1, 0x7, 0x8}, {0xfffffff9, 0x100}}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e21, 0x7, @mcast1, 0x2}, {0xa, 0x4e22, 0x1ff, @local, 0x3ff}, 0x0, {[0x100, 0x8000, 0x9, 0xfffffffd, 0xc, 0x9, 0x6, 0x9]}}, 0x5c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x802, 0x0) 00:41:56 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891a, 0x0) 00:41:56 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0xffffffff, 0x47, 0x0, 0xe6ab, 0x3, 0x101, 0x200, 0x2, 0x6e7, 0xb67, 0x8, 0x400, 0x1, 0xff, 0x3, 0x5, 0x7, 0x401, 0x6, 0x0, 0xffff, 0x6, 0x2, 0x2, 0xffffffc0, 0x8, 0x2, 0x5, 0x8, 0x80000000, 0x9, 0x7]}) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x2}, 0x2) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:56 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891b, 0x0) 00:41:56 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891a, 0x0) 00:41:56 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:56 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891b, 0x0) 00:41:56 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891a, 0x0) 00:41:56 executing program 1: openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$video(&(0x7f0000000040), 0x5, 0x80000) (async) r0 = syz_open_dev$video(&(0x7f0000000040), 0x5, 0x80000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$pppoe(0x18, 0x1, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000180)={0x4af6a7b3, "a7a702d025b0e13f3fe5190600c5ef8e4a0996ca431319deacf62e4c0e7e6d7e", 0x200, 0xb56f, 0x0, 0x2, 0x3}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x2523e46dd7c33467, {0x40, 0x1ff, 0x3, 0x7ff}, {0xffff, 0x1, 0x7, 0x8}, {0xfffffff9, 0x100}}) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e21, 0x7, @mcast1, 0x2}, {0xa, 0x4e22, 0x1ff, @local, 0x3ff}, 0x0, {[0x100, 0x8000, 0x9, 0xfffffffd, 0xc, 0x9, 0x6, 0x9]}}, 0x5c) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/custom0\x00', 0x802, 0x0) 00:41:56 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:56 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0xffffffff, 0x47, 0x0, 0xe6ab, 0x3, 0x101, 0x200, 0x2, 0x6e7, 0xb67, 0x8, 0x400, 0x1, 0xff, 0x3, 0x5, 0x7, 0x401, 0x6, 0x0, 0xffff, 0x6, 0x2, 0x2, 0xffffffc0, 0x8, 0x2, 0x5, 0x8, 0x80000000, 0x9, 0x7]}) (async, rerun: 32) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x2}, 0x2) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:56 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891b, 0x0) 00:41:56 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:56 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891a, 0x0) 00:41:56 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000001c0)={0x0, 0x0, '\x00', @raw_data=[0xffffffff, 0x47, 0x0, 0xe6ab, 0x3, 0x101, 0x200, 0x2, 0x6e7, 0xb67, 0x8, 0x400, 0x1, 0xff, 0x3, 0x5, 0x7, 0x401, 0x6, 0x0, 0xffff, 0x6, 0x2, 0x2, 0xffffffc0, 0x8, 0x2, 0x5, 0x8, 0x80000000, 0x9, 0x7]}) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x2}, 0x2) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:56 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891b, 0x0) 00:41:56 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x10, 0x2, 0x28d0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r5, 0x1}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @local, @dev}, &(0x7f00000001c0)=0xc) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r11, 0x8004562e, 0x0) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @loopback}, &(0x7f0000000d80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @private}, &(0x7f00000003c0)=0xc) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @dev}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000500)={0x7f4, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0x1f, 0x7}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x120, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8, 0x1, r10}, {0x194, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9fb, 0x2, 0x2, 0x401}, {0x3, 0x7, 0x1, 0x1}, {0x26c, 0x72, 0x3f, 0x2}, {0x4, 0x41, 0x55}, {0x2, 0x3, 0x5, 0x4}, {0x1ff, 0xc1, 0x3, 0x900000}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xbdb}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7a}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r16}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x99b, 0x2e, 0x0, 0x773}, {0x8, 0xdc, 0x6}, {0x6, 0x3f, 0x3, 0x5}, {0x4, 0x92, 0x3a, 0x7fffffff}, {0xff, 0x4, 0x0, 0x9}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}]}, 0x7f4}, 0x1, 0x0, 0x0, 0x4000801}, 0x8dc) 00:41:56 executing program 1: write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:56 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891a, 0x0) 00:41:57 executing program 0: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:57 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891b, 0x0) 00:41:57 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x10, 0x2, 0x28d0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r5, 0x1}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) (async, rerun: 64) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @local, @dev}, &(0x7f00000001c0)=0xc) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async, rerun: 32) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_G_OUTPUT(r11, 0x8004562e, 0x0) (async, rerun: 32) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @loopback}, &(0x7f0000000d80)=0xc) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) (async) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @private}, &(0x7f00000003c0)=0xc) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @dev}, &(0x7f0000000440)=0xc) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000500)={0x7f4, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0x1f, 0x7}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x120, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8, 0x1, r10}, {0x194, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9fb, 0x2, 0x2, 0x401}, {0x3, 0x7, 0x1, 0x1}, {0x26c, 0x72, 0x3f, 0x2}, {0x4, 0x41, 0x55}, {0x2, 0x3, 0x5, 0x4}, {0x1ff, 0xc1, 0x3, 0x900000}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xbdb}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7a}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r16}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x99b, 0x2e, 0x0, 0x773}, {0x8, 0xdc, 0x6}, {0x6, 0x3f, 0x3, 0x5}, {0x4, 0x92, 0x3a, 0x7fffffff}, {0xff, 0x4, 0x0, 0x9}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}]}, 0x7f4}, 0x1, 0x0, 0x0, 0x4000801}, 0x8dc) 00:41:57 executing program 1: write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:57 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891a, 0x0) 00:41:57 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 00:41:57 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891b, 0x0) 00:41:57 executing program 1: write$khugepaged_scan(0xffffffffffffffff, &(0x7f0000000000), 0x8) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:57 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 00:41:57 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891a, 0x0) 00:41:57 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair(0x10, 0x2, 0x28d0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r5, 0x1}, 0x14}}, 0x0) (async, rerun: 64) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) (async, rerun: 32) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @local, @dev}, &(0x7f00000001c0)=0xc) (rerun: 32) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0}, &(0x7f0000000240)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) (async) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r11, 0x8004562e, 0x0) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f00000002c0)={0x0, @loopback, @loopback}, &(0x7f0000000d80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) (async, rerun: 32) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000380)={0x0, @rand_addr, @private}, &(0x7f00000003c0)=0xc) (rerun: 32) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @empty, @dev}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000480)={'batadv_slave_1\x00', 0x0}) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) (rerun: 32) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f0000000d40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000500)={0x7f4, r5, 0x800, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x40000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x401, 0x1f, 0x7}]}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x120, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc1}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}, {{0x8, 0x1, r10}, {0x194, 0x2, 0x0, 0x1, [{0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9fb, 0x2, 0x2, 0x401}, {0x3, 0x7, 0x1, 0x1}, {0x26c, 0x72, 0x3f, 0x2}, {0x4, 0x41, 0x55}, {0x2, 0x3, 0x5, 0x4}, {0x1ff, 0xc1, 0x3, 0x900000}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xbdb}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r13}}}]}}, {{0x8, 0x1, r14}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7a}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r15}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r16}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x99b, 0x2e, 0x0, 0x773}, {0x8, 0xdc, 0x6}, {0x6, 0x3f, 0x3, 0x5}, {0x4, 0x92, 0x3a, 0x7fffffff}, {0xff, 0x4, 0x0, 0x9}]}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}]}, 0x7f4}, 0x1, 0x0, 0x0, 0x4000801}, 0x8dc) 00:41:57 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 00:41:57 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0xa, 0x0, 0x0, 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x4, 0x5a35b, 0x2ce349}) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x4000010, 0xffffffffffffffff, 0xb8085000) 00:41:57 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @initdev}, &(0x7f0000000100)=0xc) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @initdev}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000003c0)={0x9cc, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x50000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0xff, 0x9e, 0x3ff}, {0x7, 0x6b, 0x3, 0x3}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8, 0x1, r1}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x30, 0x1, 0x3f, 0x7}, {0x3ff, 0x6, 0x3, 0x20}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa21}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x0, 0x7, 0x0, 0x100}, {0x6, 0x5, 0x80, 0x2}, {0x81, 0x0, 0x20, 0x7}, {0x4, 0xf7, 0x3, 0x8}, {0x3a7, 0x3, 0x0, 0x40}, {0x101, 0xda, 0xb3, 0x7}, {0x9, 0x4a, 0x20, 0x1000}, {0x0, 0x1f, 0x6, 0x80000000}, {0x4, 0x7, 0xf0, 0x80000000}, {0x9, 0x6, 0x0, 0xc4a6}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r10}}}]}}]}, 0x9cc}, 0x1, 0x0, 0x0, 0x4000}, 0x20040804) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:57 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x828, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) 00:41:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8919, 0x0) 00:41:57 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x891b, 0x0) 00:41:57 executing program 5: socketpair(0x2, 0x5, 0x0, &(0x7f0000000040)) 00:41:57 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @initdev}, &(0x7f0000000100)=0xc) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), r2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @initdev}, &(0x7f00000002c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000003c0)={0x9cc, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x50000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0xff, 0x9e, 0x3ff}, {0x7, 0x6b, 0x3, 0x3}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8, 0x1, r1}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x30, 0x1, 0x3f, 0x7}, {0x3ff, 0x6, 0x3, 0x20}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa21}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x0, 0x7, 0x0, 0x100}, {0x6, 0x5, 0x80, 0x2}, {0x81, 0x0, 0x20, 0x7}, {0x4, 0xf7, 0x3, 0x8}, {0x3a7, 0x3, 0x0, 0x40}, {0x101, 0xda, 0xb3, 0x7}, {0x9, 0x4a, 0x20, 0x1000}, {0x0, 0x1f, 0x6, 0x80000000}, {0x4, 0x7, 0xf0, 0x80000000}, {0x9, 0x6, 0x0, 0xc4a6}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r10}}}]}}]}, 0x9cc}, 0x1, 0x0, 0x0, 0x4000}, 0x20040804) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:57 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0xa, 0x0, 0x0, 0x2}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x4, 0x5a35b, 0x2ce349}) (async, rerun: 32) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x4000010, 0xffffffffffffffff, 0xb8085000) (rerun: 32) 00:41:57 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x828, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) (async, rerun: 64) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) (rerun: 64) 00:41:57 executing program 5: socketpair(0x2, 0x5, 0x0, &(0x7f0000000040)) 00:41:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8919, 0x0) 00:41:57 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async, rerun: 32) sendmsg$NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x828, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) (rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) (async, rerun: 32) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r3, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xffff}, @NL802154_ATTR_PAN_ID={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) (rerun: 32) 00:41:57 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast2, @initdev}, &(0x7f0000000100)=0xc) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), r2) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000001c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @initdev}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000e00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f00000003c0)={0x9cc, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [{{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x50000}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x5, 0xff, 0x9e, 0x3ff}, {0x7, 0x6b, 0x3, 0x3}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x178, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7f}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}]}}, {{0x8, 0x1, r1}, {0x1ac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x30, 0x1, 0x3f, 0x7}, {0x3ff, 0x6, 0x3, 0x20}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa21}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x13c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1ff}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r6}, {0x144, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x84, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x54, 0x4, [{0x0, 0x7, 0x0, 0x100}, {0x6, 0x5, 0x80, 0x2}, {0x81, 0x0, 0x20, 0x7}, {0x4, 0xf7, 0x3, 0x8}, {0x3a7, 0x3, 0x0, 0x40}, {0x101, 0xda, 0xb3, 0x7}, {0x9, 0x4a, 0x20, 0x1000}, {0x0, 0x1f, 0x6, 0x80000000}, {0x4, 0x7, 0xf0, 0x80000000}, {0x9, 0x6, 0x0, 0xc4a6}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x16c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc8}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8, 0x6, r10}}}]}}]}, 0x9cc}, 0x1, 0x0, 0x0, 0x4000}, 0x20040804) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:57 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000000)={0x38, 0xa, 0x0, 0x0, 0x2}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async, rerun: 32) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, r1, 0x0, 0x1, 0x0, 0x4, 0x5a35b, 0x2ce349}) (async, rerun: 32) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x4000010, 0xffffffffffffffff, 0xb8085000) 00:41:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8918, 0x0) 00:41:57 executing program 5: socketpair(0x2, 0x5, 0x0, &(0x7f0000000040)) 00:41:57 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8919, 0x0) 00:41:57 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) 00:41:57 executing program 5: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)) 00:41:57 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x81) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r8, 0x2, 0xffff, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r9) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r10, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r10, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x48840) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8918, 0x0) 00:41:57 executing program 2: socketpair(0xa, 0x4, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000ee374f95997068bdbac01bceceb3f9c839a99f1a2177f2a19f35667f02bc9fd3946fed35233b9ba219378dbef3b87e5e2661", @ANYRES16=r1, @ANYBLOB="08002abd7000fddbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x24008001}, 0x4020010) r2 = userfaultfd(0x401) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x58, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1bb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 00:41:57 executing program 5: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)) 00:41:57 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) (async) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) 00:41:57 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8919, 0x0) 00:41:57 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8918, 0x0) 00:41:57 executing program 2: socketpair(0xa, 0x4, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000ee374f95997068bdbac01bceceb3f9c839a99f1a2177f2a19f35667f02bc9fd3946fed35233b9ba219378dbef3b87e5e2661", @ANYRES16=r1, @ANYBLOB="08002abd7000fddbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x24008001}, 0x4020010) r2 = userfaultfd(0x401) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x58, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1bb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) 00:41:57 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x81) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r5) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r8, 0x2, 0xffff, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r9) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r10, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r10, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x48840) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:57 executing program 5: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)) 00:41:57 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8919, 0x0) 00:41:57 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) (async) 00:41:57 executing program 2: socketpair(0xa, 0x4, 0x200, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000ee374f95997068bdbac01bceceb3f9c839a99f1a2177f2a19f35667f02bc9fd3946fed35233b9ba219378dbef3b87e5e2661", @ANYRES16=r1, @ANYBLOB="08002abd7000fddbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x24008001}, 0x4020010) r2 = userfaultfd(0x401) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x58, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1bb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) socketpair(0xa, 0x4, 0x200, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000ee374f95997068bdbac01bceceb3f9c839a99f1a2177f2a19f35667f02bc9fd3946fed35233b9ba219378dbef3b87e5e2661", @ANYRES16=r1, @ANYBLOB="08002abd7000fddbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x24008001}, 0x4020010) (async) userfaultfd(0x401) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x58, r1, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1bb}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x81}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) (async) 00:41:57 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8918, 0x0) 00:41:57 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8919, 0x0) 00:41:57 executing program 5: socketpair(0x2, 0x0, 0x0, &(0x7f0000000040)) 00:41:57 executing program 2: ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000080)={0x3, 0x1, @raw_data=[0x80000001, 0xffffffff, 0x1b1, 0xde, 0x3, 0x8, 0x3, 0x0, 0x7, 0x4, 0x1ff, 0x10001, 0xffffffff, 0x1ff, 0x10000, 0x40]}) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:41:57 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8918, 0x0) 00:41:57 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8919, 0x0) 00:41:57 executing program 2: ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000080)={0x3, 0x1, @raw_data=[0x80000001, 0xffffffff, 0x1b1, 0xde, 0x3, 0x8, 0x3, 0x0, 0x7, 0x4, 0x1ff, 0x10001, 0xffffffff, 0x1ff, 0x10000, 0x40]}) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:41:57 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, 0x0, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x81) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r5) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r7, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x34, r8, 0x2, 0xffff, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x4048000) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r9) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r10, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000300)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r7, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r10, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x48840) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:57 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:57 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8919, 0x0) 00:41:57 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8918, 0x0) 00:41:57 executing program 5: socketpair(0x2, 0x0, 0x0, &(0x7f0000000040)) 00:41:57 executing program 2: ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000080)={0x3, 0x1, @raw_data=[0x80000001, 0xffffffff, 0x1b1, 0xde, 0x3, 0x8, 0x3, 0x0, 0x7, 0x4, 0x1ff, 0x10001, 0xffffffff, 0x1ff, 0x10000, 0x40]}) (async) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:41:57 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8918, 0x0) 00:41:57 executing program 2: socketpair(0xa, 0x3, 0xfffffffc, &(0x7f0000000040)) 00:41:58 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8919, 0x0) 00:41:58 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:58 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x52002, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000340)={0x7fffffff, "036b851f5f90e47bae7a11750fcbed8716bcc476a6a28a647f47e6e5353c49c1", 0x40, 0xfff, 0x1, 0x4, 0x3}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000240)={0xd8, 0x3, 0x100000000, 0x8, "1c89e16f8b44ad797df715a20a913c4cb42841664dab47b8789ad882872ba80702c76636f9191ac8f1b4ada0c1cf2cebed186ef126f4b7201a71f7b1627850fa5df6845f6316018c994f043044d936547a33555c7f51ffd40f5986fdce9acd7e5db11e4ed5afa6db80e996f81aa48f4ba49afcecfa20d0e67c814194fdb081807fd67964407dc69e7a2420d96b8a7b5607aeaf6b62493dd80834aca177f26823153fe3ad50207f97f2f472c9aaa928fd1b2e4456fc4d880b9ee27b3272d156e2"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x4e22, 0x5, @mcast1, 0xe0d3}, 0x1, {[0x4, 0x2, 0x0, 0x2, 0x9b7, 0x3, 0x5, 0x1818]}}, 0x5c) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, 0xef}) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:58 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8918, 0x0) 00:41:58 executing program 5: socketpair(0x2, 0x0, 0x0, &(0x7f0000000040)) 00:41:58 executing program 2: socketpair(0xa, 0x3, 0xfffffffc, &(0x7f0000000040)) 00:41:58 executing program 2: socketpair(0xa, 0x3, 0xfffffffc, &(0x7f0000000040)) 00:41:58 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8918, 0x0) 00:41:58 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x52002, 0x0) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x52002, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000340)={0x7fffffff, "036b851f5f90e47bae7a11750fcbed8716bcc476a6a28a647f47e6e5353c49c1", 0x40, 0xfff, 0x1, 0x4, 0x3}) (async) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000340)={0x7fffffff, "036b851f5f90e47bae7a11750fcbed8716bcc476a6a28a647f47e6e5353c49c1", 0x40, 0xfff, 0x1, 0x4, 0x3}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000240)={0xd8, 0x3, 0x100000000, 0x8, "1c89e16f8b44ad797df715a20a913c4cb42841664dab47b8789ad882872ba80702c76636f9191ac8f1b4ada0c1cf2cebed186ef126f4b7201a71f7b1627850fa5df6845f6316018c994f043044d936547a33555c7f51ffd40f5986fdce9acd7e5db11e4ed5afa6db80e996f81aa48f4ba49afcecfa20d0e67c814194fdb081807fd67964407dc69e7a2420d96b8a7b5607aeaf6b62493dd80834aca177f26823153fe3ad50207f97f2f472c9aaa928fd1b2e4456fc4d880b9ee27b3272d156e2"}) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000240)={0xd8, 0x3, 0x100000000, 0x8, "1c89e16f8b44ad797df715a20a913c4cb42841664dab47b8789ad882872ba80702c76636f9191ac8f1b4ada0c1cf2cebed186ef126f4b7201a71f7b1627850fa5df6845f6316018c994f043044d936547a33555c7f51ffd40f5986fdce9acd7e5db11e4ed5afa6db80e996f81aa48f4ba49afcecfa20d0e67c814194fdb081807fd67964407dc69e7a2420d96b8a7b5607aeaf6b62493dd80834aca177f26823153fe3ad50207f97f2f472c9aaa928fd1b2e4456fc4d880b9ee27b3272d156e2"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x4e22, 0x5, @mcast1, 0xe0d3}, 0x1, {[0x4, 0x2, 0x0, 0x2, 0x9b7, 0x3, 0x5, 0x1818]}}, 0x5c) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, 0xef}) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:41:58 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) 00:41:58 executing program 0: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8919, 0x0) 00:41:58 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8918, 0x0) 00:41:58 executing program 5: socketpair(0x2, 0x5, 0x0, 0x0) 00:41:58 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x52002, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000340)={0x7fffffff, "036b851f5f90e47bae7a11750fcbed8716bcc476a6a28a647f47e6e5353c49c1", 0x40, 0xfff, 0x1, 0x4, 0x3}) (async, rerun: 32) r3 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000240)={0xd8, 0x3, 0x100000000, 0x8, "1c89e16f8b44ad797df715a20a913c4cb42841664dab47b8789ad882872ba80702c76636f9191ac8f1b4ada0c1cf2cebed186ef126f4b7201a71f7b1627850fa5df6845f6316018c994f043044d936547a33555c7f51ffd40f5986fdce9acd7e5db11e4ed5afa6db80e996f81aa48f4ba49afcecfa20d0e67c814194fdb081807fd67964407dc69e7a2420d96b8a7b5607aeaf6b62493dd80834aca177f26823153fe3ad50207f97f2f472c9aaa928fd1b2e4456fc4d880b9ee27b3272d156e2"}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)) (async) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000140)={{0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1}, {0xa, 0x4e22, 0x5, @mcast1, 0xe0d3}, 0x1, {[0x4, 0x2, 0x0, 0x2, 0x9b7, 0x3, 0x5, 0x1818]}}, 0x5c) (async) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, 0xef}) (async, rerun: 32) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (rerun: 32) 00:41:58 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8918, 0x0) 00:41:58 executing program 0: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8919, 0x0) 00:41:58 executing program 5: socketpair(0x2, 0x5, 0x0, 0x0) 00:41:58 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:58 executing program 5: socketpair(0x2, 0x5, 0x0, 0x0) 00:41:58 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 0', 0xfffffffffffffe4c) 00:41:58 executing program 0: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8919, 0x0) 00:41:58 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x2, 0x300) (async) prctl$PR_SET_KEEPCAPS(0x8, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) 00:41:58 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8918, 0x0) 00:41:58 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 0', 0xfffffffffffffe4c) 00:41:58 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 0', 0xfffffffffffffe4c) 00:41:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8917, 0x0) 00:41:58 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000240)={0x62c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa8a8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x234, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbd}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x40, 0x5, 0x1}, {0x7f, 0x3f, 0x4}, {0x81, 0x1f, 0x3, 0xe9}]}}}]}}]}, 0x62c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) 00:41:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8916, 0x0) 00:41:58 executing program 4: mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000200)={0x38, 0x3, 0xffffffffffffffff, 0x0, 0x61, 0x2, &(0x7f00000001c0)="cee5"}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) syz_open_dev$video(&(0x7f0000000100), 0x8001, 0x2080) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000140)={0x5, {0x800, 0x4, 0x80000000, 0x1}, {0x81, 0x11, 0x200, 0x9}, {0x14, 0x841}}) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000000)={0x38}) 00:41:58 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000240)={0x62c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa8a8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x234, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbd}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x40, 0x5, 0x1}, {0x7f, 0x3f, 0x4}, {0x81, 0x1f, 0x3, 0xe9}]}}}]}}]}, 0x62c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) 00:41:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8917, 0x0) 00:41:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8915, 0x0) 00:41:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8916, 0x0) 00:41:58 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_KEEPCAPS(0x8, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:58 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000880)={&(0x7f0000000240)={0x62c, 0x0, 0x800, 0x70bd29, 0x25dfdbff, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa8a8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r5}, {0x234, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xbd}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x20}}}]}}, {{0x8}, {0x244, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x4, 0x40, 0x5, 0x1}, {0x7f, 0x3f, 0x4}, {0x81, 0x1f, 0x3, 0xe9}]}}}]}}]}, 0x62c}, 0x1, 0x0, 0x0, 0xc0}, 0x4) 00:41:58 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8917, 0x0) 00:41:58 executing program 4: mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000200)={0x38, 0x3, 0xffffffffffffffff, 0x0, 0x61, 0x2, &(0x7f00000001c0)="cee5"}) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) (async, rerun: 64) syz_open_dev$video(&(0x7f0000000100), 0x8001, 0x2080) (async, rerun: 64) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) (async) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000140)={0x5, {0x800, 0x4, 0x80000000, 0x1}, {0x81, 0x11, 0x200, 0x9}, {0x14, 0x841}}) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000000)={0x38}) 00:41:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8915, 0x0) 00:41:58 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000000)) 00:41:58 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8916, 0x0) 00:41:58 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x515000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @loopback}, &(0x7f00000000c0)=0xc) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x0, 0x7fd, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x51}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x2, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:58 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000000)) 00:41:58 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8917, 0x0) 00:41:58 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8915, 0x0) 00:41:58 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000000)) 00:41:58 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8916, 0x0) 00:41:58 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x515000, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @loopback}, &(0x7f00000000c0)=0xc) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x0, 0x7fd, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x51}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x2, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:58 executing program 4: mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x5) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000200)={0x38, 0x3, 0xffffffffffffffff, 0x0, 0x61, 0x2, &(0x7f00000001c0)="cee5"}) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x0, 0x2) syz_open_dev$video(&(0x7f0000000100), 0x8001, 0x2080) (async) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) (async) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000000140)={0x5, {0x800, 0x4, 0x80000000, 0x1}, {0x81, 0x11, 0x200, 0x9}, {0x14, 0x841}}) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000000)={0x38}) 00:41:58 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8917, 0x0) 00:41:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}}, 0x2000c008) 00:41:58 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8916, 0x0) 00:41:58 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8915, 0x0) 00:41:58 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8917, 0x0) 00:41:58 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8915, 0x0) 00:41:58 executing program 0: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8916, 0x0) 00:41:58 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002dbd7000fedbdf250d00000005002f0001000000050035000100000008000300", @ANYRES32=r4, @ANYBLOB="0000ffffffffcadae94eb50078f4de77487e652ec2b92416369fe16ea2792acbed8a670dabfe5c00000000725aa44dcecc23444a2e96c60ef391f2e0f51ec144fdbb917ed2857309e8a9e4768cb6ff65a0b5d54a"], 0x48}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x840) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/84, 0x54, 0x1, &(0x7f00000002c0)=""/113, 0x71}, &(0x7f0000000380)=0x40) 00:41:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}}, 0x2000c008) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}}, 0x2000c008) (async) 00:41:58 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x515000, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @loopback}, &(0x7f00000000c0)=0xc) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x0, 0x7fd, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x51}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x2, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x2, 0x300) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x515000, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast2, @loopback}, &(0x7f00000000c0)=0xc) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x4c, 0x0, 0x7fd, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x51}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x2, 0x38, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x80) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) 00:41:58 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8917, 0x0) 00:41:58 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8915, 0x0) 00:41:58 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8916, 0x0) 00:41:58 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002dbd7000fedbdf250d00000005002f0001000000050035000100000008000300", @ANYRES32=r4, @ANYBLOB="0000ffffffffcadae94eb50078f4de77487e652ec2b92416369fe16ea2792acbed8a670dabfe5c00000000725aa44dcecc23444a2e96c60ef391f2e0f51ec144fdbb917ed2857309e8a9e4768cb6ff65a0b5d54a"], 0x48}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x840) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002dbd7000fedbdf250d00000005002f0001000000050035000100000008000300", @ANYRES32=r4, @ANYBLOB="0000ffffffffcadae94eb50078f4de77487e652ec2b92416369fe16ea2792acbed8a670dabfe5c00000000725aa44dcecc23444a2e96c60ef391f2e0f51ec144fdbb917ed2857309e8a9e4768cb6ff65a0b5d54a"], 0x48}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x840) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/84, 0x54, 0x1, &(0x7f00000002c0)=""/113, 0x71}, &(0x7f0000000380)=0x40) 00:41:58 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8917, 0x0) 00:41:58 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8915, 0x0) 00:41:58 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}}, 0x2000c008) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r1, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x2c}}, 0x2000c008) (async) 00:41:58 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8916, 0x0) 00:41:58 executing program 1: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0xfffffffffffffcea) 00:41:58 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8917, 0x0) 00:41:58 executing program 0: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8916, 0x0) 00:41:58 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8915, 0x0) 00:41:58 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002dbd7000fedbdf250d00000005002f0001000000050035000100000008000300", @ANYRES32=r4, @ANYBLOB="0000ffffffffcadae94eb50078f4de77487e652ec2b92416369fe16ea2792acbed8a670dabfe5c00000000725aa44dcecc23444a2e96c60ef391f2e0f51ec144fdbb917ed2857309e8a9e4768cb6ff65a0b5d54a"], 0x48}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x840) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/84, 0x54, 0x1, &(0x7f00000002c0)=""/113, 0x71}, &(0x7f0000000380)=0x40) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="02002dbd7000fedbdf250d00000005002f0001000000050035000100000008000300", @ANYRES32=r4, @ANYBLOB="0000ffffffffcadae94eb50078f4de77487e652ec2b92416369fe16ea2792acbed8a670dabfe5c00000000725aa44dcecc23444a2e96c60ef391f2e0f51ec144fdbb917ed2857309e8a9e4768cb6ff65a0b5d54a"], 0x48}, 0x1, 0x0, 0x0, 0x4c8c0}, 0x840) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/84, 0x54, 0x1, &(0x7f00000002c0)=""/113, 0x71}, &(0x7f0000000380)=0x40) (async) 00:41:58 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8917, 0x0) 00:41:58 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8915, 0x0) 00:41:58 executing program 0: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8916, 0x0) 00:41:59 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x3c}}, 0x8000) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) socketpair(0x27, 0x1, 0x0, &(0x7f0000000040)) 00:41:59 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8915, 0x0) 00:41:59 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8917, 0x0) 00:41:59 executing program 0: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8916, 0x0) 00:41:59 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000000200), 0x4) write$6lowpan_control(r3, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:59 executing program 1: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) (async, rerun: 64) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async, rerun: 32) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) (rerun: 32) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) (async) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0xfffffffffffffcea) 00:41:59 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x3c}}, 0x8000) (async, rerun: 64) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) socketpair(0x27, 0x1, 0x0, &(0x7f0000000040)) 00:41:59 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8915, 0x0) 00:41:59 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000000200), 0x4) write$6lowpan_control(r3, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000000200), 0x4) (async) write$6lowpan_control(r3, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async) 00:41:59 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8917, 0x0) 00:41:59 executing program 0: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8916, 0x0) 00:41:59 executing program 2: r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0xcf, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$MRT6_ASSERT(r0, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x3c}}, 0x8000) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xc8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) socketpair(0x27, 0x1, 0x0, &(0x7f0000000040)) 00:41:59 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8915, 0x0) 00:41:59 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) (async) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) setsockopt$MRT6_ASSERT(r3, 0x29, 0xcf, &(0x7f0000000200), 0x4) (async) write$6lowpan_control(r3, &(0x7f00000001c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:41:59 executing program 1: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) (async) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) (async) socket$packet(0x11, 0x3, 0x300) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) (async) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0xfffffffffffffcea) 00:41:59 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0xfffffffffffffcea) 00:41:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8914, 0x0) 00:41:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8912, 0x0) 00:41:59 executing program 4: unshare(0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x41) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x49) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000140)={0x1, 0x1f}, 0x2) 00:41:59 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0xa}, 0x20) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/223, 0xdf, 0x0, &(0x7f0000000180)=""/239, 0xef}, &(0x7f0000000280)=0x40) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @remote}, &(0x7f0000000380)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000004c0)={0x6a8, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x75c04204}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x878}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x43}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xffff, 0x6, 0x8, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0x1, 0xab, 0x10001}, {0xf9a, 0x1, 0x5, 0x8001}, {0x800, 0x81, 0x7f, 0xff}]}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000000) 00:41:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8914, 0x0) 00:41:59 executing program 4: unshare(0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x41) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x41) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x49) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000140)={0x1, 0x1f}, 0x2) 00:41:59 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0xa}, 0x20) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/223, 0xdf, 0x0, &(0x7f0000000180)=""/239, 0xef}, &(0x7f0000000280)=0x40) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @remote}, &(0x7f0000000380)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000004c0)={0x6a8, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x75c04204}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x878}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x43}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xffff, 0x6, 0x8, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0x1, 0xab, 0x10001}, {0xf9a, 0x1, 0x5, 0x8001}, {0x800, 0x81, 0x7f, 0xff}]}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000000) 00:41:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8912, 0x0) 00:41:59 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0xfffffffffffffcea) 00:41:59 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8914, 0x0) 00:41:59 executing program 1: keyctl$unlink(0x9, 0x0, 0xfffffffffffffff9) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:59 executing program 4: unshare(0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x41) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x49) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000140)={0x1, 0x1f}, 0x2) 00:41:59 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0xa}, 0x20) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/223, 0xdf, 0x0, &(0x7f0000000180)=""/239, 0xef}, &(0x7f0000000280)=0x40) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @remote}, &(0x7f0000000380)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000004c0)={0x6a8, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x75c04204}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x878}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x43}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xffff, 0x6, 0x8, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0x1, 0xab, 0x10001}, {0xf9a, 0x1, 0x5, 0x8001}, {0x800, 0x81, 0x7f, 0xff}]}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0xa}, 0x20) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/223, 0xdf, 0x0, &(0x7f0000000180)=""/239, 0xef}, &(0x7f0000000280)=0x40) (async) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @remote}, &(0x7f0000000380)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000440)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b80)={&(0x7f00000004c0)={0x6a8, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x75c04204}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0x1dc, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x878}}}]}}, {{0x8}, {0x1f0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x43}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x47}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xffff, 0x6, 0x8, 0x5}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x7, 0x1, 0xab, 0x10001}, {0xf9a, 0x1, 0x5, 0x8001}, {0x800, 0x81, 0x7f, 0xff}]}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x6a8}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000000) (async) 00:41:59 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x3, {0x4, 0x1, 0x6, 0x3ff}}) 00:41:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8912, 0x0) 00:41:59 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8914, 0x0) 00:41:59 executing program 1: keyctl$unlink(0x9, 0x0, 0xfffffffffffffff9) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:59 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x3, {0x4, 0x1, 0x6, 0x3ff}}) 00:41:59 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8914, 0x0) 00:41:59 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) getsockname$packet(r4, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0xfffffffffffffcea) 00:41:59 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8912, 0x0) 00:41:59 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x3, {0x4, 0x1, 0x6, 0x3ff}}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x103, 0x3, {0x4, 0x1, 0x6, 0x3ff}}) (async) 00:41:59 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x180, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdb}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) 00:41:59 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8914, 0x0) 00:41:59 executing program 1: keyctl$unlink(0x9, 0x0, 0xfffffffffffffff9) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:41:59 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8912, 0x0) 00:41:59 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x180, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdb}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) 00:41:59 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x60010, r0, 0x5c5f0000) 00:41:59 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8914, 0x0) 00:41:59 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x180, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdb}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) getsockname$packet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x180, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xdb}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x26}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) (async) 00:41:59 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8912, 0x0) 00:41:59 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x60010, r0, 0x5c5f0000) 00:41:59 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) 00:41:59 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8914, 0x0) 00:41:59 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000000)={0x8, "a1750f386b8e7d6518af0993f463b39e11958d052c764f27e2a808a184613f39", 0x3, 0x4b200000, 0x0, 0x40000, 0x2}) 00:41:59 executing program 2: socketpair(0x3, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4004851) 00:41:59 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8912, 0x0) 00:41:59 executing program 4: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000000, 0x60010, r0, 0x5c5f0000) 00:41:59 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8914, 0x0) 00:41:59 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8912, 0x0) 00:41:59 executing program 2: socketpair(0x3, 0x5, 0x0, &(0x7f0000000040)) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4004851) 00:41:59 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000000)={0x8, "a1750f386b8e7d6518af0993f463b39e11958d052c764f27e2a808a184613f39", 0x3, 0x4b200000, 0x0, 0x40000, 0x2}) 00:41:59 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8914, 0x0) 00:41:59 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0x8}, 0x2) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000280)={0x8695, 0xc, 0x4, 0x10000, 0x6, {r3, r4/1000+10000}, {0x5, 0x1, 0x6, 0x4, 0x1f, 0x8, "4a4622e9"}, 0x9, 0x4, {}, 0x1}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250400000005002d000100ffff07e3d8709b29a75cbe05e1ff290023009072ad9048ce2d0600000005003800010000000a000900ba04f96fada600000500300000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4006800) 00:41:59 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) socket$packet(0x11, 0x2, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:41:59 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8912, 0x0) 00:41:59 executing program 2: socketpair(0x3, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4004851) socketpair(0x3, 0x5, 0x0, &(0x7f0000000040)) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x4004851) (async) 00:41:59 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000000)={0x8, "a1750f386b8e7d6518af0993f463b39e11958d052c764f27e2a808a184613f39", 0x3, 0x4b200000, 0x0, 0x40000, 0x2}) 00:41:59 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0x8}, 0x2) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000280)={0x8695, 0xc, 0x4, 0x10000, 0x6, {r3, r4/1000+10000}, {0x5, 0x1, 0x6, 0x4, 0x1f, 0x8, "4a4622e9"}, 0x9, 0x4, {}, 0x1}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250400000005002d000100ffff07e3d8709b29a75cbe05e1ff290023009072ad9048ce2d0600000005003800010000000a000900ba04f96fada600000500300000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4006800) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0x8}, 0x2) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) (async) clock_gettime(0x0, &(0x7f0000000240)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000280)={0x8695, 0xc, 0x4, 0x10000, 0x6, {r3, r4/1000+10000}, {0x5, 0x1, 0x6, 0x4, 0x1f, 0x8, "4a4622e9"}, 0x9, 0x4, {}, 0x1}) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250400000005002d000100ffff07e3d8709b29a75cbe05e1ff290023009072ad9048ce2d0600000005003800010000000a000900ba04f96fada600000500300000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4006800) (async) 00:41:59 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8912, 0x0) 00:41:59 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8914, 0x0) 00:41:59 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0x8}, 0x2) (async) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r2, 0xc0585609, &(0x7f0000000280)={0x8695, 0xc, 0x4, 0x10000, 0x6, {r3, r4/1000+10000}, {0x5, 0x1, 0x6, 0x4, 0x1f, 0x8, "4a4622e9"}, 0x9, 0x4, {}, 0x1}) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf250400000005002d000100ffff07e3d8709b29a75cbe05e1ff290023009072ad9048ce2d0600000005003800010000000a000900ba04f96fada600000500300000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4006800) 00:42:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x12, r1, 0xd703b000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:42:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf251900000008000300", @ANYRES32=r1, @ANYBLOB="080003000efe5ef727a7b117235278efb2c9bbf61045eb14a0f320b4d5d096abed0b", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="8c00060003000000036da2090f0006000300000003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4040080) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:00 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8912, 0x0) 00:42:00 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8914, 0x0) 00:42:00 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) socket$packet(0x11, 0x2, 0x300) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf251900000008000300", @ANYRES32=r1, @ANYBLOB="080003000efe5ef727a7b117235278efb2c9bbf61045eb14a0f320b4d5d096abed0b", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="8c00060003000000036da2090f0006000300000003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4040080) (async) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x12, r1, 0xd703b000) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:42:00 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fedbdf251900000008000300", @ANYRES32=r1, @ANYBLOB="080003000efe5ef727a7b117235278efb2c9bbf61045eb14a0f320b4d5d096abed0b", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r2, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="8c00060003000000036da2090f0006000300000003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4040080) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:00 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8912, 0x0) 00:42:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890c, 0x0) 00:42:00 executing program 2: socketpair(0xa, 0x6, 0x0, &(0x7f0000000040)) 00:42:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000005, 0x12, r1, 0xd703b000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) (async, rerun: 32) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (rerun: 32) 00:42:00 executing program 2: socketpair(0xa, 0x6, 0x0, &(0x7f0000000040)) 00:42:00 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 00:42:00 executing program 2: socketpair(0xa, 0x6, 0x0, &(0x7f0000000040)) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0xef70c63500808cdc, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0x7}, 0x2) 00:42:00 executing program 3: socketpair(0xa, 0x6, 0x0, &(0x7f0000000040)) 00:42:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890c, 0x0) 00:42:00 executing program 1: ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000040)={0x0, 0x1, @stop_pts=0x4}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000000c0)={0x5, {0x1, 0x81, 0x6, 0x1000}, {0xff, 0x1ff, 0x800, 0x5}, {0x7ff, 0xcc}}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x7, 0x0, 0x3}, 0xc) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x12080, 0x0) write$rfkill(r3, &(0x7f0000000280)={0x4, 0x0, 0x1, 0x1, 0x1}, 0x8) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000002c0)={0x8, {0x86, 0x9, 0x79a, 0x5}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_fd={0x49, 0x0, 0x4, 0x0, 0x8, {0x0, 0x2710}, {0x4, 0x8, 0x0, 0x80, 0x0, 0xb7, "d44dbb83"}, 0x8, 0x4, {&(0x7f0000000100)=[{0x200, 0x800, {r2}, 0x3}, {0x9, 0x7, {}, 0x4}]}, 0x100000, 0x0, r4}) 00:42:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890b, 0x0) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0xef70c63500808cdc, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0x7}, 0x2) 00:42:00 executing program 2: socketpair(0x11, 0x65ed4f34731bc58e, 0x0, &(0x7f0000000040)) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async, rerun: 32) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000100), 0xef70c63500808cdc, 0x0) (rerun: 32) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0x7}, 0x2) 00:42:00 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890c, 0x0) 00:42:00 executing program 1: ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000040)={0x0, 0x1, @stop_pts=0x4}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000000c0)={0x5, {0x1, 0x81, 0x6, 0x1000}, {0xff, 0x1ff, 0x800, 0x5}, {0x7ff, 0xcc}}) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x7, 0x0, 0x3}, 0xc) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x12080, 0x0) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x12080, 0x0) write$rfkill(r3, &(0x7f0000000280)={0x4, 0x0, 0x1, 0x1, 0x1}, 0x8) (async) write$rfkill(r3, &(0x7f0000000280)={0x4, 0x0, 0x1, 0x1, 0x1}, 0x8) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000002c0)={0x8, {0x86, 0x9, 0x79a, 0x5}}) (async) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000002c0)={0x8, {0x86, 0x9, 0x79a, 0x5}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_fd={0x49, 0x0, 0x4, 0x0, 0x8, {0x0, 0x2710}, {0x4, 0x8, 0x0, 0x80, 0x0, 0xb7, "d44dbb83"}, 0x8, 0x4, {&(0x7f0000000100)=[{0x200, 0x800, {r2}, 0x3}, {0x9, 0x7, {}, 0x4}]}, 0x100000, 0x0, r4}) 00:42:00 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:00 executing program 2: socketpair(0x11, 0x65ed4f34731bc58e, 0x0, &(0x7f0000000040)) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x12}, 0x50f7e466685401f2) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYRES32, @ANYBLOB="0c0006", @ANYRES32], 0xa4}}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair(0x28, 0x0, 0x4, &(0x7f0000000140)) ioctl$VIDIOC_G_OUTPUT(r7, 0x8004562e, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @private}, &(0x7f0000000200)=0xc) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r8, 0x8004562e, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20010, r8, 0x61f46000) ioctl$PPPOEIOCDFWD(r8, 0xb101, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000300)={0x38, 0x7, r7, 0x0, 0x1, 0x0, 0x9, 0x3e624f, 0x264485}) r9 = syz_open_dev$video(&(0x7f0000000240), 0x5, 0x64a300) ioctl$VIDIOC_S_MODULATOR(r9, 0x40445637, &(0x7f0000000280)={0x8, "65ccb51d3409488d537150b06badc42f166077069cf77be45f77a5d7ddffeecc", 0x4, 0x4, 0x3ff, 0x2, 0x1}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r8, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) setsockopt$MRT6_PIM(r10, 0x29, 0xcf, &(0x7f0000000040), 0x4) 00:42:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890b, 0x0) 00:42:00 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x890c, 0x0) 00:42:00 executing program 2: socketpair(0x11, 0x65ed4f34731bc58e, 0x0, &(0x7f0000000040)) 00:42:00 executing program 1: ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000040)={0x0, 0x1, @stop_pts=0x4}) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f00000000c0)={0x5, {0x1, 0x81, 0x6, 0x1000}, {0xff, 0x1ff, 0x800, 0x5}, {0x7ff, 0xcc}}) (async) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x7, 0x0, 0x3}, 0xc) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x12080, 0x0) write$rfkill(r3, &(0x7f0000000280)={0x4, 0x0, 0x1, 0x1, 0x1}, 0x8) (async, rerun: 32) ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000002c0)={0x8, {0x86, 0x9, 0x79a, 0x5}}) (rerun: 32) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)=@multiplanar_fd={0x49, 0x0, 0x4, 0x0, 0x8, {0x0, 0x2710}, {0x4, 0x8, 0x0, 0x80, 0x0, 0xb7, "d44dbb83"}, 0x8, 0x4, {&(0x7f0000000100)=[{0x200, 0x800, {r2}, 0x3}, {0x9, 0x7, {}, 0x4}]}, 0x100000, 0x0, r4}) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (async, rerun: 64) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x12}, 0x50f7e466685401f2) (async, rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYRES32, @ANYBLOB="0c0006", @ANYRES32], 0xa4}}, 0x0) (rerun: 64) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair(0x28, 0x0, 0x4, &(0x7f0000000140)) (async, rerun: 64) ioctl$VIDIOC_G_OUTPUT(r7, 0x8004562e, 0x0) (rerun: 64) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @private}, &(0x7f0000000200)=0xc) (async, rerun: 32) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async, rerun: 32) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r8, 0x8004562e, 0x0) (async, rerun: 32) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20010, r8, 0x61f46000) (async, rerun: 32) ioctl$PPPOEIOCDFWD(r8, 0xb101, 0x0) (async, rerun: 64) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000300)={0x38, 0x7, r7, 0x0, 0x1, 0x0, 0x9, 0x3e624f, 0x264485}) (rerun: 64) r9 = syz_open_dev$video(&(0x7f0000000240), 0x5, 0x64a300) ioctl$VIDIOC_S_MODULATOR(r9, 0x40445637, &(0x7f0000000280)={0x8, "65ccb51d3409488d537150b06badc42f166077069cf77be45f77a5d7ddffeecc", 0x4, 0x4, 0x3ff, 0x2, 0x1}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r8, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) (async) setsockopt$MRT6_PIM(r10, 0x29, 0xcf, &(0x7f0000000040), 0x4) 00:42:00 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x890c, 0x0) 00:42:00 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890b, 0x0) 00:42:00 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) 00:42:00 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x890c, 0x0) 00:42:00 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x23}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040008}, 0x200100c0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x2, 0x6, {r1, r2/1000+60000}, {0x4, 0x2, 0x9, 0x5, 0x6, 0x8, "5522ca15"}, 0x20, 0x1, {&(0x7f0000000180)=[{0x5, 0x20, {0x9}, 0x34e6}, {0xfffffaf5, 0x3ff, {0xa0e4}}]}, 0x8, 0x0, r3}) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) 00:42:00 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x890b, 0x0) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r2, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x12}, 0x50f7e466685401f2) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r2, @ANYRES32, @ANYBLOB="0c0006", @ANYRES32], 0xa4}}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair(0x28, 0x0, 0x4, &(0x7f0000000140)) ioctl$VIDIOC_G_OUTPUT(r7, 0x8004562e, 0x0) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @private}, &(0x7f0000000200)=0xc) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r8, 0x8004562e, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20010, r8, 0x61f46000) (async) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x20010, r8, 0x61f46000) ioctl$PPPOEIOCDFWD(r8, 0xb101, 0x0) (async) ioctl$PPPOEIOCDFWD(r8, 0xb101, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r8, 0x3ba0, &(0x7f0000000300)={0x38, 0x7, r7, 0x0, 0x1, 0x0, 0x9, 0x3e624f, 0x264485}) syz_open_dev$video(&(0x7f0000000240), 0x5, 0x64a300) (async) r9 = syz_open_dev$video(&(0x7f0000000240), 0x5, 0x64a300) ioctl$VIDIOC_S_MODULATOR(r9, 0x40445637, &(0x7f0000000280)={0x8, "65ccb51d3409488d537150b06badc42f166077069cf77be45f77a5d7ddffeecc", 0x4, 0x4, 0x3ff, 0x2, 0x1}) socket$igmp6(0xa, 0x3, 0x2) (async) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r8, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) setsockopt$MRT6_PIM(r10, 0x29, 0xcf, &(0x7f0000000040), 0x4) 00:42:00 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890c, 0x0) 00:42:00 executing program 2: socketpair(0x25, 0x4, 0x1000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000280)={0x530, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ac0}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc8f}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x22ac}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb4c8}}, {0x8}}}]}}]}, 0x530}, 0x1, 0x0, 0x0, 0x80}, 0x4) 00:42:00 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x890b, 0x0) 00:42:00 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890c, 0x0) 00:42:00 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x23}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040008}, 0x200100c0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x2, 0x6, {r1, r2/1000+60000}, {0x4, 0x2, 0x9, 0x5, 0x6, 0x8, "5522ca15"}, 0x20, 0x1, {&(0x7f0000000180)=[{0x5, 0x20, {0x9}, 0x34e6}, {0xfffffaf5, 0x3ff, {0xa0e4}}]}, 0x8, 0x0, r3}) socket$packet(0x11, 0x2, 0x300) (async) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) 00:42:00 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)="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", 0xfa, 0xfffffffffffffffd) 00:42:00 executing program 2: socketpair(0x25, 0x4, 0x1000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000280)={0x530, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ac0}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc8f}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x22ac}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb4c8}}, {0x8}}}]}}]}, 0x530}, 0x1, 0x0, 0x0, 0x80}, 0x4) 00:42:00 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x890b, 0x0) 00:42:00 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890c, 0x0) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)="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", 0xfa, 0xfffffffffffffffd) 00:42:00 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890b, 0x0) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)="3a225fee40bf34cfce13ff3c82ed4d846abf4971f9fe16853077e050f99e2baf72cc5860a311f74cb651a015e4d2dbca531bea91fe4684e174ed1917d5c2029b996158817ac7a740ccaedc03d3a7ebce151d81784c44c1294f80a19c4bd170e1ef9718aec66e9cfdce3741c53937b36b09d95d86be51d457eaf8164af7da7ae3a2ca7fe440a1f51f642be9925258b15832c5e6a347102984e4bae36ed20f4d88ddf7478ae66b035540e8bee19c61a0037cec24ba61d29376b240e05039166a22fbb85694d7e4e6f119496a931246d95d9d8bb30d2ff47324072a5f2e7441357addd11864ba6d57ac86bd20f8ebfdc1288466f10ad514ebe9cb4d", 0xfa, 0xfffffffffffffffd) 00:42:00 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x890c, 0x0) 00:42:00 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890b, 0x0) 00:42:00 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x10001}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffff8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x23}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040008}, 0x200100c0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0xa, 0x4, 0x2, 0x6, {r1, r2/1000+60000}, {0x4, 0x2, 0x9, 0x5, 0x6, 0x8, "5522ca15"}, 0x20, 0x1, {&(0x7f0000000180)=[{0x5, 0x20, {0x9}, 0x34e6}, {0xfffffaf5, 0x3ff, {0xa0e4}}]}, 0x8, 0x0, r3}) (async, rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r4, 0xc0905664, 0x0) 00:42:00 executing program 2: socketpair(0x25, 0x4, 0x1000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000280)={0x530, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ac0}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc8f}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x22ac}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb4c8}}, {0x8}}}]}}]}, 0x530}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x25, 0x4, 0x1000, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000180)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)) (async) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000007c0)={&(0x7f0000000280)={0x530, r3, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xd0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r4}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8}, {0x1b0, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ac0}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc8f}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x22ac}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb4c8}}, {0x8}}}]}}]}, 0x530}, 0x1, 0x0, 0x0, 0x80}, 0x4) (async) 00:42:00 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socketpair(0x2b, 0x1, 0x80, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) 00:42:00 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890b, 0x0) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x44) 00:42:00 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x890c, 0x0) 00:42:00 executing program 2: socketpair(0x3b, 0x5, 0x0, &(0x7f0000000040)) 00:42:00 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x890b, 0x0) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x44) 00:42:00 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x890c, 0x0) 00:42:00 executing program 2: socketpair(0x3b, 0x5, 0x0, &(0x7f0000000040)) 00:42:00 executing program 4: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x44) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x44) (async) [ 2522.112493][ T2213] ieee802154 phy0 wpan0: encryption failed: -22 [ 2522.114282][ T2213] ieee802154 phy1 wpan1: encryption failed: -22 00:42:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x76, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED, @BATADV_ATTR_HARD_IFINDEX={0x0, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000002}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x0, 0x32, 0x3133}, @BATADV_ATTR_TPMETER_TEST_TIME={0x0, 0xb, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) 00:42:02 executing program 2: socketpair(0x3b, 0x5, 0x0, &(0x7f0000000040)) 00:42:02 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:02 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x890b, 0x0) 00:42:02 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8907, 0x0) 00:42:02 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8906, 0x0) 00:42:02 executing program 2: getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000080)=0x4) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:02 executing program 2: getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:02 executing program 1: socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x76, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED, @BATADV_ATTR_HARD_IFINDEX={0x0, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000002}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x0, 0x32, 0x3133}, @BATADV_ATTR_TPMETER_TEST_TIME={0x0, 0xb, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) 00:42:02 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8906, 0x0) 00:42:02 executing program 2: getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000080)=0x4) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000000), &(0x7f0000000080)=0x4) (async) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) 00:42:02 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8907, 0x0) 00:42:02 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x890b, 0x0) 00:42:02 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1}) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x57110, r4, 0x66ea3000) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) 00:42:02 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:02 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8907, 0x0) 00:42:02 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8906, 0x0) 00:42:02 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1}) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x57110, r4, 0x66ea3000) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1}) (async) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) (async) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x57110, r4, 0x66ea3000) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) (async) 00:42:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r1) (async, rerun: 64) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x76, 0x0, 0x20, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED, @BATADV_ATTR_HARD_IFINDEX={0x0, 0x6, r3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000002}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x0, 0x32, 0x3133}, @BATADV_ATTR_TPMETER_TEST_TIME={0x0, 0xb, 0x4}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x810) 00:42:02 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8904, 0x0) 00:42:02 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000000c0)={0x38, 0x5, r1}) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x57110, r4, 0x66ea3000) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000100)) 00:42:02 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8904, 0x0) 00:42:02 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) socketpair(0xa, 0x5, 0x0, &(0x7f0000000080)) 00:42:02 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8907, 0x0) 00:42:02 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8906, 0x0) 00:42:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:02 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x84201, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:02 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) socketpair(0xa, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair(0xa, 0x5, 0x0, &(0x7f0000000080)) 00:42:02 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8907, 0x0) 00:42:02 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8906, 0x0) 00:42:02 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8904, 0x0) 00:42:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:02 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8907, 0x0) 00:42:02 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8906, 0x0) 00:42:02 executing program 2: syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) socketpair(0xa, 0x5, 0x0, &(0x7f0000000080)) 00:42:02 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8906, 0x0) 00:42:02 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8907, 0x0) 00:42:02 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) socketpair(0x25, 0x1, 0x5, &(0x7f0000000000)) 00:42:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x2, 0x300) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) 00:42:02 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:02 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8906, 0x0) 00:42:02 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8907, 0x0) 00:42:02 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8904, 0x0) 00:42:02 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8904, 0x0) 00:42:02 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8906, 0x0) 00:42:02 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8907, 0x0) 00:42:02 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8904, 0x0) 00:42:02 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair(0x25, 0x1, 0x5, &(0x7f0000000000)) 00:42:02 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8904, 0x0) 00:42:02 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8907, 0x0) 00:42:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x634dc1, 0x0) 00:42:02 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socketpair(0x2a, 0x5, 0xfff, &(0x7f0000000100)) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:02 executing program 4: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8906, 0x0) 00:42:02 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8907, 0x0) 00:42:02 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8904, 0x0) 00:42:02 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8904, 0x0) 00:42:02 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair(0x25, 0x1, 0x5, &(0x7f0000000000)) 00:42:02 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8904, 0x0) 00:42:02 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x634dc1, 0x0) 00:42:03 executing program 4: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8906, 0x0) 00:42:03 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8907, 0x0) 00:42:03 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8904, 0x0) 00:42:03 executing program 2: socketpair(0x29, 0x5, 0xfffffffc, &(0x7f00000000c0)) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x2, @sdr}) socketpair(0x3, 0x800, 0xb0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40b0cc2faff2b8f6}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="b8f02cbd7000fedadf25080000000000f4847894bf257c50f0fdfeb9701f053247f66d083b899363529c07c6f958817d51da38e8c7d36e87ecd070b8afd96523e654aa0f0616399ad20430a70c4d8b1507543327085041d4900ce59cde2e3038a210cd6251521aa0ff000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000040), 0x4) r2 = syz_open_dev$video(&(0x7f0000000200), 0x7fffffffffffffff, 0x101040) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x6f06) 00:42:03 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:03 executing program 4: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8906, 0x0) 00:42:03 executing program 1: socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x634dc1, 0x0) 00:42:03 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8903, 0x0) 00:42:03 executing program 2: socketpair(0x29, 0x5, 0xfffffffc, &(0x7f00000000c0)) (async) socketpair(0x29, 0x5, 0xfffffffc, &(0x7f00000000c0)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x2, @sdr}) socketpair(0x3, 0x800, 0xb0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40b0cc2faff2b8f6}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="b8f02cbd7000fedadf25080000000000f4847894bf257c50f0fdfeb9701f053247f66d083b899363529c07c6f958817d51da38e8c7d36e87ecd070b8afd96523e654aa0f0616399ad20430a70c4d8b1507543327085041d4900ce59cde2e3038a210cd6251521aa0ff000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000040), 0x4) r2 = syz_open_dev$video(&(0x7f0000000200), 0x7fffffffffffffff, 0x101040) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x6f06) 00:42:03 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8904, 0x0) 00:42:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8902, 0x0) 00:42:03 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8903, 0x0) 00:42:03 executing program 2: socketpair(0x29, 0x5, 0xfffffffc, &(0x7f00000000c0)) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x2, @sdr}) (async) socketpair(0x3, 0x800, 0xb0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40b0cc2faff2b8f6}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="b8f02cbd7000fedadf25080000000000f4847894bf257c50f0fdfeb9701f053247f66d083b899363529c07c6f958817d51da38e8c7d36e87ecd070b8afd96523e654aa0f0616399ad20430a70c4d8b1507543327085041d4900ce59cde2e3038a210cd6251521aa0ff000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000040), 0x4) (async) r2 = syz_open_dev$video(&(0x7f0000000200), 0x7fffffffffffffff, 0x101040) ioctl$VIDIOC_OVERLAY(r2, 0x4004560e, &(0x7f0000000240)=0x6f06) 00:42:03 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8901, 0x0) 00:42:03 executing program 2: socketpair(0xa, 0x5, 0x7ffe, &(0x7f0000000040)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r0, 0x0, 0x10000, 0x0, 0x3, 0x3d499, 0x8daae}) 00:42:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8902, 0x0) 00:42:03 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x2c, 0x5, 0x6, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffb}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8880) 00:42:03 executing program 2: socketpair(0xa, 0x5, 0x7ffe, &(0x7f0000000040)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r0, 0x0, 0x10000, 0x0, 0x3, 0x3d499, 0x8daae}) 00:42:03 executing program 2: socketpair(0xa, 0x5, 0x7ffe, &(0x7f0000000040)) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000080)={0x38, 0x7, r0, 0x0, 0x10000, 0x0, 0x3, 0x3d499, 0x8daae}) 00:42:03 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8901, 0x0) 00:42:03 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8903, 0x0) 00:42:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x2c, 0x5, 0x6, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffb}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8880) socket$packet(0x11, 0x2, 0x300) (async) socketpair(0x2c, 0x5, 0x6, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffb}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8880) (async) 00:42:03 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:03 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:03 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8901, 0x0) 00:42:03 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8902, 0x0) 00:42:03 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8903, 0x0) 00:42:03 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, 0x103, 0x1, {0x8, 0x9, 0x9, 0xfffffffd}}) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:03 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8903, 0x0) 00:42:03 executing program 2: syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:03 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) (async) socketpair(0x2c, 0x5, 0x6, &(0x7f0000000040)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xfffffffb}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8880) 00:42:03 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8901, 0x0) 00:42:03 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000000)) 00:42:03 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8902, 0x0) 00:42:03 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8903, 0x0) 00:42:03 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8902, 0x0) 00:42:03 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8901, 0x0) 00:42:03 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8902, 0x0) 00:42:03 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8903, 0x0) 00:42:03 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000000)) 00:42:03 executing program 3: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8901, 0x0) 00:42:03 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:03 executing program 1: socket$packet(0x11, 0x2, 0x300) syz_open_dev$video(&(0x7f0000000000), 0x4, 0x101) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:03 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8903, 0x0) 00:42:03 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8902, 0x0) 00:42:03 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000000)) 00:42:03 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8902, 0x0) 00:42:03 executing program 1: socket$packet(0x11, 0x2, 0x300) (async) syz_open_dev$video(&(0x7f0000000000), 0x4, 0x101) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:03 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8901, 0x0) 00:42:03 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44081}, 0x4008044) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) socketpair(0x11, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x91881, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) 00:42:03 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8903, 0x0) 00:42:03 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8902, 0x0) 00:42:03 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8901, 0x0) 00:42:03 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:03 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8903, 0x0) 00:42:03 executing program 1: socket$packet(0x11, 0x2, 0x300) (async) syz_open_dev$video(&(0x7f0000000000), 0x4, 0x101) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:03 executing program 4: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8902, 0x0) 00:42:03 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44081}, 0x4008044) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) socketpair(0x11, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x91881, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) 00:42:03 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8901, 0x0) 00:42:03 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8901, 0x0) 00:42:03 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44081}, 0x4008044) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) socketpair(0x11, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x91881, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44081}, 0x4008044) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) (async) socketpair(0x11, 0x5, 0x7, &(0x7f0000000040)) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x91881, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) (async) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) (async) 00:42:03 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8903, 0x0) 00:42:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) write$smack_current(r1, &(0x7f0000000040)={'\xe4_\x12\xe2\xf6#$\xdc\xf1\xe4\xd9\xe5\xcc\xff\xe9\x19\x80\x13\xb9x\xfb\x80[\x84N\x93u\xcb\xd0\x86\xa4\x97s[\x9b\x12\xbf\xc0j\xcd\x1b\xf0\x98\xd9\x91\x9a\x9c\x84\xa9L\xdb\x00\x0f\xa4\xd4\x9de\xa0\xe7\x91\x8a'}, 0x3e) 00:42:03 executing program 4: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8902, 0x0) 00:42:03 executing program 2: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) socketpair(0xf, 0xa, 0x0, &(0x7f0000000080)) 00:42:03 executing program 0: socket$packet(0x11, 0x2, 0x300) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:03 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8901, 0x0) 00:42:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) write$smack_current(r1, &(0x7f0000000040)={'\xe4_\x12\xe2\xf6#$\xdc\xf1\xe4\xd9\xe5\xcc\xff\xe9\x19\x80\x13\xb9x\xfb\x80[\x84N\x93u\xcb\xd0\x86\xa4\x97s[\x9b\x12\xbf\xc0j\xcd\x1b\xf0\x98\xd9\x91\x9a\x9c\x84\xa9L\xdb\x00\x0f\xa4\xd4\x9de\xa0\xe7\x91\x8a'}, 0x3e) 00:42:03 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8903, 0x0) 00:42:03 executing program 4: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8902, 0x0) 00:42:03 executing program 2: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) (async) socketpair(0xf, 0xa, 0x0, &(0x7f0000000080)) 00:42:03 executing program 2: ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) socketpair(0xf, 0xa, 0x0, &(0x7f0000000080)) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) (async) socketpair(0xf, 0xa, 0x0, &(0x7f0000000080)) (async) 00:42:03 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xc, 0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) write$smack_current(r1, &(0x7f0000000040)={'\xe4_\x12\xe2\xf6#$\xdc\xf1\xe4\xd9\xe5\xcc\xff\xe9\x19\x80\x13\xb9x\xfb\x80[\x84N\x93u\xcb\xd0\x86\xa4\x97s[\x9b\x12\xbf\xc0j\xcd\x1b\xf0\x98\xd9\x91\x9a\x9c\x84\xa9L\xdb\x00\x0f\xa4\xd4\x9de\xa0\xe7\x91\x8a'}, 0x3e) 00:42:03 executing program 2: add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:03 executing program 3: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x8901, 0x0) 00:42:04 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x300, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44081}, 0x4008044) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) socketpair(0x11, 0x5, 0x7, &(0x7f0000000040)={0xffffffffffffffff}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x91881, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r3) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r2) 00:42:04 executing program 5: socketpair(0xa, 0x5, 0x0, &(0x7f0000000000)) 00:42:04 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:04 executing program 5: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="b00000000514100026bd7000fddbdf2508020100010000000800030004010000080001000000000008000300020000000800010000000000080003000100000008000100020000000800030002000000080001000100000008000300030000000800010002000000080003000400000008000100000000000800030004000000080001000200002008000300040000000800010001000000080003000300000008000100010000000800030004000000"], 0xb0}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 00:42:04 executing program 2: add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) (async) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) 00:42:04 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:04 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:04 executing program 2: add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffc) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:04 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100010bd7000fcdbdf251a0000000c0006000300000003000000"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r6) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r7, 0x2, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x2c}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x50, r12, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x14}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000090}, 0x48000) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r11, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008041}, 0x4004800) r14 = socket$packet(0x11, 0x2, 0x300) socketpair(0x3, 0x80000, 0x7, &(0x7f0000000380)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r14, 0xc0905664, 0x0) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r15, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6d634b1414297128}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8011}, 0x40) 00:42:04 executing program 2: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) r0 = syz_open_dev$dri(&(0x7f0000000080), 0xe01e, 0x40) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x80000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5c77a9ec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x30, r2, 0x2000) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 00:42:04 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:04 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:04 executing program 0: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:04 executing program 3: write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:04 executing program 3: write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:04 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:04 executing program 2: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) syz_open_dev$dri(&(0x7f0000000080), 0xe01e, 0x40) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0xe01e, 0x40) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f00000000c0)) r1 = socket$inet(0x2, 0x80000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5c77a9ec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x30, r2, 0x2000) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) (async) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 00:42:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100010bd7000fcdbdf251a0000000c0006000300000003000000"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r6) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r7, 0x2, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x2c}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) (async) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x50, r12, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x14}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000090}, 0x48000) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r11, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008041}, 0x4004800) (async) r14 = socket$packet(0x11, 0x2, 0x300) socketpair(0x3, 0x80000, 0x7, &(0x7f0000000380)) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r14, 0xc0905664, 0x0) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r15, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6d634b1414297128}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8011}, 0x40) 00:42:04 executing program 3: write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:04 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x5411, 0x0) 00:42:04 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:04 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:04 executing program 0: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:04 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x5411, 0x0) 00:42:04 executing program 2: mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) (async) r0 = syz_open_dev$dri(&(0x7f0000000080), 0xe01e, 0x40) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f00000000c0)) (async) r1 = socket$inet(0x2, 0x80000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x5c77a9ec}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3, 0x30, r2, 0x2000) (async) shmget(0x2, 0x2000, 0x200, &(0x7f0000ffb000/0x2000)=nil) 00:42:04 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:04 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="100010bd7000fcdbdf251a0000000c0006000300000003000000"], 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r6) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r7, 0x2, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0xffffffff}]}, 0x2c}}, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r4) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) (rerun: 32) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0x50, r12, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x14}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000090}, 0x48000) sendmsg$NL802154_CMD_NEW_INTERFACE(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r11, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2008041}, 0x4004800) (async, rerun: 64) r14 = socket$packet(0x11, 0x2, 0x300) socketpair(0x3, 0x80000, 0x7, &(0x7f0000000380)) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r14, 0xc0905664, 0x0) (async, rerun: 32) r15 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r15, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000440)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x6d634b1414297128}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8011}, 0x40) 00:42:04 executing program 5: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x5411, 0x0) 00:42:04 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:04 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:04 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:04 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:04 executing program 0: socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:04 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:04 executing program 2: socketpair(0x15, 0x6, 0xc, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x7e822d53d77ef9d4}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000280)={0x38, 0x8, r2, 0x0, 0x6056, 0xdc, &(0x7f0000000140)="e743ec7e848c7529a67f146e47ccc5b931d8acb0b7e083a657b15cd173a2105e6ff17d26d34a2a3fd5fdf9a5eea1ea334cb0ee64d45b7ef9fb1ea70c97113874329a8b5394f6e8ca366f08bf045a8ba415707f8585256ed7e6f4f252492c1abc1993fe48d65f142ddcd9e38704aef7e863d62354abc25373a339a6bf2e51f20662ab966d993a50bda3216406e04dbde6ca6619286698270625463ea1591e90c0eb0594ba4fecbfd059bb0241f33c8aa295f8dd49c72d6c6edfece234b9a58d3d5970ce46dc9e4b6b18de469d8f3bab07871e67d44d02d3407cf2a9d4", 0x4}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c8083, 0x0) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000240)=ANY=[@ANYRES64=r4]) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x0, 0x3e}, 0xc) 00:42:04 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:04 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:04 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x121100) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x0, 0x0, &(0x7f00000000c0), 0x6, 0x0, &(0x7f0000000240)=[{}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x3, 0x0, &(0x7f00000004c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000003c0)={r1}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) 00:42:04 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:04 executing program 5: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:04 executing program 0: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:04 executing program 2: socketpair(0x15, 0x6, 0xc, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x7e822d53d77ef9d4}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000280)={0x38, 0x8, r2, 0x0, 0x6056, 0xdc, &(0x7f0000000140)="e743ec7e848c7529a67f146e47ccc5b931d8acb0b7e083a657b15cd173a2105e6ff17d26d34a2a3fd5fdf9a5eea1ea334cb0ee64d45b7ef9fb1ea70c97113874329a8b5394f6e8ca366f08bf045a8ba415707f8585256ed7e6f4f252492c1abc1993fe48d65f142ddcd9e38704aef7e863d62354abc25373a339a6bf2e51f20662ab966d993a50bda3216406e04dbde6ca6619286698270625463ea1591e90c0eb0594ba4fecbfd059bb0241f33c8aa295f8dd49c72d6c6edfece234b9a58d3d5970ce46dc9e4b6b18de469d8f3bab07871e67d44d02d3407cf2a9d4", 0x4}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c8083, 0x0) (async) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) (async, rerun: 32) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000240)=ANY=[@ANYRES64=r4]) (async, rerun: 32) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x0, 0x3e}, 0xc) 00:42:04 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x5411, 0x0) 00:42:04 executing program 4: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:04 executing program 1: r0 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x121100) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x0, 0x0, &(0x7f00000000c0), 0x6, 0x0, &(0x7f0000000240)=[{}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x3, 0x0, &(0x7f00000004c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000003c0)={r1}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x1, 0x121100) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x0, 0x0, &(0x7f00000000c0), 0x6, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000004c0)=[{}, {}, {}]}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000003c0)={r1}) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) (async) 00:42:04 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:04 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 00:42:04 executing program 2: socketpair(0x15, 0x6, 0xc, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x7e822d53d77ef9d4}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000280)={0x38, 0x8, r2, 0x0, 0x6056, 0xdc, &(0x7f0000000140)="e743ec7e848c7529a67f146e47ccc5b931d8acb0b7e083a657b15cd173a2105e6ff17d26d34a2a3fd5fdf9a5eea1ea334cb0ee64d45b7ef9fb1ea70c97113874329a8b5394f6e8ca366f08bf045a8ba415707f8585256ed7e6f4f252492c1abc1993fe48d65f142ddcd9e38704aef7e863d62354abc25373a339a6bf2e51f20662ab966d993a50bda3216406e04dbde6ca6619286698270625463ea1591e90c0eb0594ba4fecbfd059bb0241f33c8aa295f8dd49c72d6c6edfece234b9a58d3d5970ce46dc9e4b6b18de469d8f3bab07871e67d44d02d3407cf2a9d4", 0x4}) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x4c8083, 0x0) (async) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, &(0x7f0000000240)=ANY=[@ANYRES64=r4]) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xcb, &(0x7f0000000080)={0x1, 0x0, 0x2, 0x0, 0x3e}, 0xc) 00:42:04 executing program 4: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:04 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x5411, 0x0) 00:42:04 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 00:42:04 executing program 2: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x73a8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x60004005) 00:42:04 executing program 0: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:04 executing program 4: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:04 executing program 1: syz_open_dev$media(&(0x7f0000000000), 0x1, 0x121100) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x121100) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000000040)=[{}], 0x0, 0x0, &(0x7f00000000c0), 0x6, 0x0, &(0x7f0000000240)=[{}, {}, {0x0, 0x80000000}, {}, {}, {}], 0x3, 0x0, &(0x7f00000004c0)=[{}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000003c0)={r1}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) 00:42:04 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, 0x0, 0x0) 00:42:04 executing program 5: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x5411, 0x0) 00:42:04 executing program 4: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:04 executing program 2: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x73a8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x60004005) 00:42:04 executing program 1: sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2112000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x801) socket$packet(0x11, 0x3, 0x300) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) 00:42:04 executing program 2: mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x73a8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x73a8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x60004005) 00:42:04 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (fail_nth: 1) 00:42:04 executing program 0: socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:04 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (fail_nth: 1) [ 2525.004442][ T6912] FAULT_INJECTION: forcing a failure. [ 2525.004442][ T6912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2525.014949][ T6912] CPU: 0 PID: 6912 Comm: syz-executor.3 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2525.017553][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2525.020151][ T6912] Call trace: [ 2525.021028][ T6912] dump_backtrace+0x1b8/0x1e4 [ 2525.022350][ T6912] show_stack+0x2c/0x44 [ 2525.023391][ T6912] dump_stack_lvl+0xd0/0x124 [ 2525.024544][ T6912] dump_stack+0x1c/0x28 [ 2525.025635][ T6912] should_fail_ex+0x3f8/0x5c4 [ 2525.026865][ T6912] should_fail+0x14/0x24 [ 2525.028003][ T6912] should_fail_usercopy+0x20/0x30 [ 2525.029341][ T6912] simple_read_from_buffer+0xd4/0x248 [ 2525.030878][ T6912] proc_fail_nth_read+0x134/0x1a0 [ 2525.032351][ T6912] vfs_read+0x284/0x8d4 [ 2525.033450][ T6912] ksys_read+0x15c/0x26c [ 2525.034587][ T6912] __arm64_sys_read+0x7c/0x90 [ 2525.035899][ T6912] invoke_syscall+0x98/0x2b8 [ 2525.037173][ T6912] el0_svc_common+0x130/0x23c [ 2525.038339][ T6912] do_el0_svc+0x48/0x58 [ 2525.039466][ T6912] el0_svc+0x54/0x158 [ 2525.040663][ T6912] el0t_64_sync_handler+0x84/0xfc [ 2525.041949][ T6912] el0t_64_sync+0x190/0x194 [ 2525.045660][ T6917] FAULT_INJECTION: forcing a failure. 00:42:05 executing program 1: sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2112000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x801) socket$packet(0x11, 0x3, 0x300) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) [ 2525.045660][ T6917] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.049188][ T6917] CPU: 0 PID: 6917 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2525.051857][ T6917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2525.054743][ T6917] Call trace: [ 2525.055602][ T6917] dump_backtrace+0x1b8/0x1e4 [ 2525.056933][ T6917] show_stack+0x2c/0x44 [ 2525.058188][ T6917] dump_stack_lvl+0xd0/0x124 [ 2525.059447][ T6917] dump_stack+0x1c/0x28 [ 2525.060657][ T6917] should_fail_ex+0x3f8/0x5c4 [ 2525.061986][ T6917] __should_failslab+0xc8/0x128 [ 2525.063357][ T6917] should_failslab+0x10/0x28 [ 2525.064675][ T6917] __kmem_cache_alloc_node+0x80/0x37c [ 2525.066164][ T6917] __kmalloc+0xb8/0x1b8 [ 2525.067270][ T6917] tomoyo_realpath_from_path+0xc8/0x4cc [ 2525.068868][ T6917] tomoyo_path_number_perm+0x1ec/0x6a8 [ 2525.070490][ T6917] tomoyo_file_ioctl+0x2c/0x3c 00:42:05 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) [ 2525.071756][ T6917] security_file_ioctl+0x80/0xbc [ 2525.073108][ T6917] __arm64_sys_ioctl+0xa8/0x1c8 [ 2525.074510][ T6917] invoke_syscall+0x98/0x2b8 [ 2525.075742][ T6917] el0_svc_common+0x130/0x23c [ 2525.076972][ T6917] do_el0_svc+0x48/0x58 [ 2525.078092][ T6917] el0_svc+0x54/0x158 [ 2525.079202][ T6917] el0t_64_sync_handler+0x84/0xfc [ 2525.080661][ T6917] el0t_64_sync+0x190/0x194 00:42:05 executing program 2: socketpair(0x8, 0x800, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 00:42:05 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (fail_nth: 1) [ 2525.101223][ T6917] ERROR: Out of memory at tomoyo_realpath_from_path. 00:42:05 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x10000200000c0) 00:42:05 executing program 2: socketpair(0x8, 0x800, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socketpair(0x8, 0x800, 0x0, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) 00:42:05 executing program 1: sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2112000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x801) socket$packet(0x11, 0x3, 0x300) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) 00:42:05 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x10000c0000020) [ 2525.141230][ T6928] FAULT_INJECTION: forcing a failure. [ 2525.141230][ T6928] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.145401][ T6928] CPU: 0 PID: 6928 Comm: syz-executor.4 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 00:42:05 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) [ 2525.147809][ T6928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2525.150514][ T6928] Call trace: [ 2525.151441][ T6928] dump_backtrace+0x1b8/0x1e4 [ 2525.152788][ T6928] show_stack+0x2c/0x44 [ 2525.153940][ T6928] dump_stack_lvl+0xd0/0x124 [ 2525.155300][ T6928] dump_stack+0x1c/0x28 [ 2525.156440][ T6928] should_fail_ex+0x3f8/0x5c4 [ 2525.157706][ T6928] __should_failslab+0xc8/0x128 [ 2525.159079][ T6928] should_failslab+0x10/0x28 [ 2525.160290][ T6928] __kmem_cache_alloc_node+0x80/0x37c [ 2525.161709][ T6928] __kmalloc+0xb8/0x1b8 [ 2525.162838][ T6928] tomoyo_realpath_from_path+0xc8/0x4cc [ 2525.164343][ T6928] tomoyo_path_number_perm+0x1ec/0x6a8 [ 2525.165827][ T6928] tomoyo_file_ioctl+0x2c/0x3c [ 2525.167103][ T6928] security_file_ioctl+0x80/0xbc [ 2525.168410][ T6928] __arm64_sys_ioctl+0xa8/0x1c8 00:42:05 executing program 2: socketpair(0x8, 0x800, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) [ 2525.169804][ T6928] invoke_syscall+0x98/0x2b8 [ 2525.171186][ T6928] el0_svc_common+0x130/0x23c [ 2525.172392][ T6928] do_el0_svc+0x48/0x58 [ 2525.173605][ T6928] el0_svc+0x54/0x158 [ 2525.174704][ T6928] el0t_64_sync_handler+0x84/0xfc [ 2525.176071][ T6928] el0t_64_sync+0x190/0x194 [ 2525.209978][ T6928] ERROR: Out of memory at tomoyo_realpath_from_path. 00:42:05 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (fail_nth: 2) 00:42:05 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x300000000000000) 00:42:05 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x5, [@enum={0x10, 0x7, 0x0, 0x6, 0x4, [{0x2, 0x1}, {0x8, 0x80}, {0x4, 0xffff}, {0xd, 0x100}, {0xc, 0x2}, {0x1, 0x1}, {0x7, 0x2}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x7d, 0x6}, @union={0xa, 0x7, 0x0, 0x5, 0x0, 0x100, [{0xe, 0x1, 0x3}, {0x4, 0x4, 0x400}, {0x80000001, 0x4}, {0x10, 0x0, 0x1}, {0x2, 0x4, 0x2}, {0x6, 0x5, 0xa2}, {0x2, 0x0, 0x80000001}]}, @fwd={0x5}, @func={0xa, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000100)=""/115, 0xe9, 0x73, 0x1, 0xb233}, 0x20) 00:42:05 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x80) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r6) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x20}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x93}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3f}]}, 0x68}}, 0x4844) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x881) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r14, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r10, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fedbdf251600000008000300", @ANYRES32=r2, @ANYBLOB="0c00060002000000020000000c00060002000000000000000c000600000000000000000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r17, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x81) socketpair(0xb, 0x1, 0x3, &(0x7f0000000000)) 00:42:05 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) [ 2525.276410][ T6946] FAULT_INJECTION: forcing a failure. [ 2525.276410][ T6946] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.284801][ T6946] CPU: 0 PID: 6946 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 00:42:05 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (fail_nth: 2) 00:42:05 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) [ 2525.287449][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2525.290125][ T6946] Call trace: [ 2525.291035][ T6946] dump_backtrace+0x1b8/0x1e4 [ 2525.292324][ T6946] show_stack+0x2c/0x44 [ 2525.293555][ T6946] dump_stack_lvl+0xd0/0x124 [ 2525.294822][ T6946] dump_stack+0x1c/0x28 [ 2525.295905][ T6946] should_fail_ex+0x3f8/0x5c4 [ 2525.297175][ T6946] __should_failslab+0xc8/0x128 [ 2525.298521][ T6946] should_failslab+0x10/0x28 [ 2525.299785][ T6946] __kmem_cache_alloc_node+0x80/0x37c [ 2525.301357][ T6946] __kmalloc+0xb8/0x1b8 [ 2525.302504][ T6946] tomoyo_encode+0x270/0x4b0 [ 2525.303787][ T6946] tomoyo_realpath_from_path+0x478/0x4cc [ 2525.305323][ T6946] tomoyo_path_number_perm+0x1ec/0x6a8 [ 2525.306846][ T6946] tomoyo_file_ioctl+0x2c/0x3c [ 2525.308260][ T6946] security_file_ioctl+0x80/0xbc [ 2525.309710][ T6946] __arm64_sys_ioctl+0xa8/0x1c8 [ 2525.310771][ T6954] FAULT_INJECTION: forcing a failure. [ 2525.310771][ T6954] name failslab, interval 1, probability 0, space 0, times 0 [ 2525.311126][ T6946] invoke_syscall+0x98/0x2b8 [ 2525.311154][ T6946] el0_svc_common+0x130/0x23c [ 2525.311165][ T6946] do_el0_svc+0x48/0x58 [ 2525.311174][ T6946] el0_svc+0x54/0x158 [ 2525.311189][ T6946] el0t_64_sync_handler+0x84/0xfc [ 2525.311204][ T6946] el0t_64_sync+0x190/0x194 [ 2525.323787][ T6954] CPU: 1 PID: 6954 Comm: syz-executor.4 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2525.326544][ T6954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2525.329312][ T6954] Call trace: [ 2525.330197][ T6954] dump_backtrace+0x1b8/0x1e4 [ 2525.331461][ T6954] show_stack+0x2c/0x44 [ 2525.332652][ T6954] dump_stack_lvl+0xd0/0x124 [ 2525.333818][ T6954] dump_stack+0x1c/0x28 [ 2525.334936][ T6954] should_fail_ex+0x3f8/0x5c4 [ 2525.336311][ T6954] __should_failslab+0xc8/0x128 [ 2525.337714][ T6954] should_failslab+0x10/0x28 [ 2525.339058][ T6954] __kmem_cache_alloc_node+0x80/0x37c [ 2525.340485][ T6954] __kmalloc+0xb8/0x1b8 [ 2525.340728][ T6946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2525.341499][ T6954] tomoyo_encode+0x270/0x4b0 [ 2525.341518][ T6954] tomoyo_realpath_from_path+0x478/0x4cc [ 2525.341532][ T6954] tomoyo_path_number_perm+0x1ec/0x6a8 [ 2525.341544][ T6954] tomoyo_file_ioctl+0x2c/0x3c [ 2525.341557][ T6954] security_file_ioctl+0x80/0xbc [ 2525.350156][ T6954] __arm64_sys_ioctl+0xa8/0x1c8 [ 2525.351501][ T6954] invoke_syscall+0x98/0x2b8 [ 2525.352658][ T6954] el0_svc_common+0x130/0x23c [ 2525.353888][ T6954] do_el0_svc+0x48/0x58 [ 2525.354959][ T6954] el0_svc+0x54/0x158 [ 2525.356011][ T6954] el0t_64_sync_handler+0x84/0xfc [ 2525.357375][ T6954] el0t_64_sync+0x190/0x194 [ 2525.373428][ T6954] ERROR: Out of memory at tomoyo_realpath_from_path. 00:42:05 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x5, [@enum={0x10, 0x7, 0x0, 0x6, 0x4, [{0x2, 0x1}, {0x8, 0x80}, {0x4, 0xffff}, {0xd, 0x100}, {0xc, 0x2}, {0x1, 0x1}, {0x7, 0x2}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x7d, 0x6}, @union={0xa, 0x7, 0x0, 0x5, 0x0, 0x100, [{0xe, 0x1, 0x3}, {0x4, 0x4, 0x400}, {0x80000001, 0x4}, {0x10, 0x0, 0x1}, {0x2, 0x4, 0x2}, {0x6, 0x5, 0xa2}, {0x2, 0x0, 0x80000001}]}, @fwd={0x5}, @func={0xa, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000100)=""/115, 0xe9, 0x73, 0x1, 0xb233}, 0x20) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x5, [@enum={0x10, 0x7, 0x0, 0x6, 0x4, [{0x2, 0x1}, {0x8, 0x80}, {0x4, 0xffff}, {0xd, 0x100}, {0xc, 0x2}, {0x1, 0x1}, {0x7, 0x2}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x7d, 0x6}, @union={0xa, 0x7, 0x0, 0x5, 0x0, 0x100, [{0xe, 0x1, 0x3}, {0x4, 0x4, 0x400}, {0x80000001, 0x4}, {0x10, 0x0, 0x1}, {0x2, 0x4, 0x2}, {0x6, 0x5, 0xa2}, {0x2, 0x0, 0x80000001}]}, @fwd={0x5}, @func={0xa, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000100)=""/115, 0xe9, 0x73, 0x1, 0xb233}, 0x20) (async) 00:42:05 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:05 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (fail_nth: 3) 00:42:05 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x80) (async, rerun: 64) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r6) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x20}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x93}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3f}]}, 0x68}}, 0x4844) (async) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x881) (async) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r14, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r10, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fedbdf251600000008000300", @ANYRES32=r2, @ANYBLOB="0c00060002000000020000000c00060002000000000000000c000600000000000000000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) (async) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r17, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x81) socketpair(0xb, 0x1, 0x3, &(0x7f0000000000)) [ 2525.429817][ T6962] FAULT_INJECTION: forcing a failure. [ 2525.429817][ T6962] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:42:05 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (fail_nth: 3) 00:42:05 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async, rerun: 64) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) [ 2525.444349][ T6962] CPU: 1 PID: 6962 Comm: syz-executor.5 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2525.447018][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2525.449582][ T6962] Call trace: [ 2525.450424][ T6962] dump_backtrace+0x1b8/0x1e4 [ 2525.451689][ T6962] show_stack+0x2c/0x44 [ 2525.452817][ T6962] dump_stack_lvl+0xd0/0x124 [ 2525.454110][ T6962] dump_stack+0x1c/0x28 [ 2525.455253][ T6962] should_fail_ex+0x3f8/0x5c4 [ 2525.456522][ T6962] should_fail+0x14/0x24 [ 2525.457648][ T6962] should_fail_usercopy+0x20/0x30 [ 2525.459075][ T6962] simple_read_from_buffer+0xd4/0x248 [ 2525.460434][ T6962] proc_fail_nth_read+0x134/0x1a0 [ 2525.461826][ T6962] vfs_read+0x284/0x8d4 [ 2525.462970][ T6962] ksys_read+0x15c/0x26c [ 2525.464121][ T6962] __arm64_sys_read+0x7c/0x90 [ 2525.464712][ T6970] FAULT_INJECTION: forcing a failure. [ 2525.464712][ T6970] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2525.465401][ T6962] invoke_syscall+0x98/0x2b8 [ 2525.465417][ T6962] el0_svc_common+0x130/0x23c [ 2525.465427][ T6962] do_el0_svc+0x48/0x58 [ 2525.465436][ T6962] el0_svc+0x54/0x158 [ 2525.465451][ T6962] el0t_64_sync_handler+0x84/0xfc [ 2525.474790][ T6962] el0t_64_sync+0x190/0x194 [ 2525.476004][ T6970] CPU: 0 PID: 6970 Comm: syz-executor.4 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2525.478768][ T6970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2525.481496][ T6970] Call trace: [ 2525.482382][ T6970] dump_backtrace+0x1b8/0x1e4 [ 2525.483626][ T6970] show_stack+0x2c/0x44 [ 2525.484899][ T6970] dump_stack_lvl+0xd0/0x124 [ 2525.486089][ T6970] dump_stack+0x1c/0x28 [ 2525.487299][ T6970] should_fail_ex+0x3f8/0x5c4 [ 2525.488580][ T6970] should_fail+0x14/0x24 [ 2525.489687][ T6970] should_fail_usercopy+0x20/0x30 [ 2525.491033][ T6970] simple_read_from_buffer+0xd4/0x248 [ 2525.492598][ T6970] proc_fail_nth_read+0x134/0x1a0 [ 2525.494008][ T6970] vfs_read+0x284/0x8d4 [ 2525.495155][ T6970] ksys_read+0x15c/0x26c [ 2525.496292][ T6970] __arm64_sys_read+0x7c/0x90 [ 2525.497530][ T6970] invoke_syscall+0x98/0x2b8 [ 2525.498777][ T6970] el0_svc_common+0x130/0x23c [ 2525.500005][ T6970] do_el0_svc+0x48/0x58 [ 2525.501078][ T6970] el0_svc+0x54/0x158 [ 2525.502166][ T6970] el0t_64_sync_handler+0x84/0xfc [ 2525.503480][ T6970] el0t_64_sync+0x190/0x194 00:42:05 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:05 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x5, [@enum={0x10, 0x7, 0x0, 0x6, 0x4, [{0x2, 0x1}, {0x8, 0x80}, {0x4, 0xffff}, {0xd, 0x100}, {0xc, 0x2}, {0x1, 0x1}, {0x7, 0x2}]}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x62, 0x0, 0x7d, 0x6}, @union={0xa, 0x7, 0x0, 0x5, 0x0, 0x100, [{0xe, 0x1, 0x3}, {0x4, 0x4, 0x400}, {0x80000001, 0x4}, {0x10, 0x0, 0x1}, {0x2, 0x4, 0x2}, {0x6, 0x5, 0xa2}, {0x2, 0x0, 0x80000001}]}, @fwd={0x5}, @func={0xa, 0x0, 0x0, 0xc, 0x1}]}, {0x0, [0x0, 0x0, 0x2e]}}, &(0x7f0000000100)=""/115, 0xe9, 0x73, 0x1, 0xb233}, 0x20) 00:42:05 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:05 executing program 2: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004050}, 0x80) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r4, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r6) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r6) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000a00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, 0x0, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000000}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c001}, 0x80) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8010000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x68, r7, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x20}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x93}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3f}]}, 0x68}}, 0x4844) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r3) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x1}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x881) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r14, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r14, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r10, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_SEC_DEVICE={0x18, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r15}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4001}, 0x10) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000fedbdf251600000008000300", @ANYRES32=r2, @ANYBLOB="0c00060002000000020000000c00060002000000000000000c000600000000000000000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LIST_IFACE(r17, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x81) (async) sendmsg$IEEE802154_LIST_IFACE(r17, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x1c, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r16}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x81) socketpair(0xb, 0x1, 0x3, &(0x7f0000000000)) 00:42:05 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) 00:42:05 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x2, 0x0) 00:42:05 executing program 1: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0xda2b000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000000c0), 0x4) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000140)={0x4, {0x6, 0x80000000, 0x1f, 0x6}, {0x5, 0x5, 0x10000, 0x3}, {0xfffffffd, 0x20}}) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x3, {0x6, 0x78, 0x85a8, 0x400}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) 00:42:05 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x2, 0x0) 00:42:05 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x10, 0x0) 00:42:05 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) 00:42:05 executing program 1: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0xda2b000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000000c0), 0x4) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000140)={0x4, {0x6, 0x80000000, 0x1f, 0x6}, {0x5, 0x5, 0x10000, 0x3}, {0xfffffffd, 0x20}}) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x3, {0x6, 0x78, 0x85a8, 0x400}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0xda2b000) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000000c0), 0x4) (async) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000140)={0x4, {0x6, 0x80000000, 0x1f, 0x6}, {0x5, 0x5, 0x10000, 0x3}, {0xfffffffd, 0x20}}) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x3, {0x6, 0x78, 0x85a8, 0x400}}) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) (async) 00:42:06 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:42:06 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40041}, 0x20000000) 00:42:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x10, 0x0) 00:42:06 executing program 1: mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0xda2b000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000000c0), 0x4) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000140)={0x4, {0x6, 0x80000000, 0x1f, 0x6}, {0x5, 0x5, 0x10000, 0x3}, {0xfffffffd, 0x20}}) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x3, {0x6, 0x78, 0x85a8, 0x400}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x30, 0xffffffffffffffff, 0xda2b000) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) (async) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f00000000c0), 0x4) (async) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000140)={0x4, {0x6, 0x80000000, 0x1f, 0x6}, {0x5, 0x5, 0x10000, 0x3}, {0xfffffffd, 0x20}}) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000100)={0x3, {0x6, 0x78, 0x85a8, 0x400}}) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) (async) 00:42:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:06 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) 00:42:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5421, 0x0) 00:42:06 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40041}, 0x20000000) 00:42:06 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:06 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x0, 0x1, @stop_pts=0x5}) 00:42:06 executing program 0: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:42:06 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10000000}]}, 0x44}, 0x1, 0x0, 0x0, 0x40041}, 0x20000000) 00:42:06 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:06 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) (fail_nth: 1) 00:42:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5421, 0x0) 00:42:06 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x0, 0x1, @stop_pts=0x5}) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x0, 0x1, @stop_pts=0x5}) (async) 00:42:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x942, 0x0) syz_io_uring_setup(0x2c7b, &(0x7f0000000080)={0x0, 0xb09d, 0x2000, 0x3, 0x182, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5450, 0x0) 00:42:06 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) [ 2526.487825][ T7248] FAULT_INJECTION: forcing a failure. [ 2526.487825][ T7248] name failslab, interval 1, probability 0, space 0, times 0 00:42:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x942, 0x0) syz_io_uring_setup(0x2c7b, &(0x7f0000000080)={0x0, 0xb09d, 0x2000, 0x3, 0x182, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) (async) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) [ 2526.503980][ T7248] CPU: 1 PID: 7248 Comm: syz-executor.0 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2526.506605][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2526.509252][ T7248] Call trace: [ 2526.510114][ T7248] dump_backtrace+0x1b8/0x1e4 [ 2526.511353][ T7248] show_stack+0x2c/0x44 [ 2526.512420][ T7248] dump_stack_lvl+0xd0/0x124 [ 2526.513636][ T7248] dump_stack+0x1c/0x28 [ 2526.514767][ T7248] should_fail_ex+0x3f8/0x5c4 [ 2526.516018][ T7248] __should_failslab+0xc8/0x128 [ 2526.517360][ T7248] should_failslab+0x10/0x28 [ 2526.518583][ T7248] slab_pre_alloc_hook+0x6c/0x334 [ 2526.520003][ T7248] kmem_cache_alloc_lru+0x54/0x394 [ 2526.521400][ T7248] sock_alloc_inode+0x2c/0xcc [ 2526.522677][ T7248] new_inode_pseudo+0x68/0x1d0 [ 2526.523970][ T7248] __sock_create+0x134/0x884 [ 2526.525272][ T7248] __sys_socket+0x134/0x340 [ 2526.526514][ T7248] __arm64_sys_socket+0x7c/0x94 [ 2526.527801][ T7248] invoke_syscall+0x98/0x2b8 [ 2526.529090][ T7248] el0_svc_common+0x130/0x23c [ 2526.530330][ T7248] do_el0_svc+0x48/0x58 [ 2526.531533][ T7248] el0_svc+0x54/0x158 [ 2526.532662][ T7248] el0t_64_sync_handler+0x84/0xfc [ 2526.534058][ T7248] el0t_64_sync+0x190/0x194 [ 2526.546167][ T7248] socket: no more sockets 00:42:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x942, 0x0) syz_io_uring_setup(0x2c7b, &(0x7f0000000080)={0x0, 0xb09d, 0x2000, 0x3, 0x182, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x942, 0x0) (async) syz_io_uring_setup(0x2c7b, &(0x7f0000000080)={0x0, 0xb09d, 0x2000, 0x3, 0x182, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140)) (async) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) 00:42:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5450, 0x0) 00:42:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5451, 0x0) 00:42:06 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 00:42:06 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x0, 0x1, @stop_pts=0x5}) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000000)={0x0, 0x1, @stop_pts=0x5}) (async) 00:42:06 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) (fail_nth: 2) 00:42:06 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1405, 0x2, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4010}, 0x20008014) 00:42:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5452, 0x0) 00:42:06 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) [ 2526.671168][ T7277] FAULT_INJECTION: forcing a failure. [ 2526.671168][ T7277] name failslab, interval 1, probability 0, space 0, times 0 00:42:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5451, 0x0) [ 2526.684760][ T7277] CPU: 1 PID: 7277 Comm: syz-executor.0 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2526.687464][ T7277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2526.690120][ T7277] Call trace: [ 2526.690989][ T7277] dump_backtrace+0x1b8/0x1e4 [ 2526.692212][ T7277] show_stack+0x2c/0x44 [ 2526.693276][ T7277] dump_stack_lvl+0xd0/0x124 [ 2526.694567][ T7277] dump_stack+0x1c/0x28 [ 2526.695734][ T7277] should_fail_ex+0x3f8/0x5c4 [ 2526.696934][ T7277] __should_failslab+0xc8/0x128 [ 2526.698280][ T7277] should_failslab+0x10/0x28 [ 2526.699456][ T7277] kmem_cache_alloc+0x80/0x424 [ 2526.700744][ T7277] security_inode_alloc+0x30/0x124 [ 2526.702176][ T7277] inode_init_always+0x658/0xac0 [ 2526.703493][ T7277] new_inode_pseudo+0x7c/0x1d0 [ 2526.704953][ T7277] __sock_create+0x134/0x884 [ 2526.706224][ T7277] __sys_socket+0x134/0x340 [ 2526.707442][ T7277] __arm64_sys_socket+0x7c/0x94 [ 2526.708794][ T7277] invoke_syscall+0x98/0x2b8 [ 2526.710034][ T7277] el0_svc_common+0x130/0x23c [ 2526.711264][ T7277] do_el0_svc+0x48/0x58 [ 2526.712359][ T7277] el0_svc+0x54/0x158 [ 2526.713402][ T7277] el0t_64_sync_handler+0x84/0xfc [ 2526.714780][ T7277] el0t_64_sync+0x190/0x194 00:42:06 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1405, 0x2, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4010}, 0x20008014) [ 2526.726230][ T7277] socket: no more sockets 00:42:06 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 00:42:06 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1405, 0x2, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4010}, 0x20008014) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1405, 0x2, 0x70bd25, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x4010}, 0x20008014) (async) 00:42:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5460, 0x0) 00:42:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5452, 0x0) 00:42:06 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'nicvf0\x00'}}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x880) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x4, {0x6, 0x7fffffff, 0xb5e}}) 00:42:06 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000040)={0x8}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00031f000000fddbdf25020000000c003200010000000a0009000180c2000001000005002f0001000000080039000000000008003c000400"/74], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40) getitimer(0x0, &(0x7f0000000200)) 00:42:06 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) (fail_nth: 3) 00:42:06 executing program 2: socketpair(0x6, 0x5, 0x8, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9008040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000180)={0x1, 0x6}, 0x2) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x7f1e1dbb83cfbe36, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) 00:42:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5460, 0x0) 00:42:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8901, 0x0) [ 2526.856352][ T7305] FAULT_INJECTION: forcing a failure. [ 2526.856352][ T7305] name failslab, interval 1, probability 0, space 0, times 0 [ 2526.859671][ T7305] CPU: 0 PID: 7305 Comm: syz-executor.0 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2526.862191][ T7305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2526.864817][ T7305] Call trace: [ 2526.865665][ T7305] dump_backtrace+0x1b8/0x1e4 00:42:06 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000040)={0x8}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00031f000000fddbdf25020000000c003200010000000a0009000180c2000001000005002f0001000000080039000000000008003c000400"/74], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) getitimer(0x0, &(0x7f0000000200)) [ 2526.866991][ T7305] show_stack+0x2c/0x44 [ 2526.868161][ T7305] dump_stack_lvl+0xd0/0x124 [ 2526.869490][ T7305] dump_stack+0x1c/0x28 [ 2526.870701][ T7305] should_fail_ex+0x3f8/0x5c4 [ 2526.872083][ T7305] __should_failslab+0xc8/0x128 [ 2526.873532][ T7305] should_failslab+0x10/0x28 [ 2526.874824][ T7305] __kmem_cache_alloc_node+0x80/0x37c [ 2526.876317][ T7305] __kmalloc+0xb8/0x1b8 [ 2526.877546][ T7305] sk_prot_alloc+0xc4/0x1f0 [ 2526.878823][ T7305] sk_alloc+0x44/0x3f4 [ 2526.879906][ T7305] packet_create+0xf0/0x7a4 [ 2526.881189][ T7305] __sock_create+0x43c/0x884 [ 2526.882437][ T7305] __sys_socket+0x134/0x340 [ 2526.883795][ T7305] __arm64_sys_socket+0x7c/0x94 [ 2526.885168][ T7305] invoke_syscall+0x98/0x2b8 [ 2526.886493][ T7305] el0_svc_common+0x130/0x23c [ 2526.887820][ T7305] do_el0_svc+0x48/0x58 [ 2526.888996][ T7305] el0_svc+0x54/0x158 [ 2526.890087][ T7305] el0t_64_sync_handler+0x84/0xfc [ 2526.891504][ T7305] el0t_64_sync+0x190/0x194 00:42:06 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000040)={0x8}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00031f000000fddbdf25020000000c003200010000000a0009000180c2000001000005002f0001000000080039000000000008003c000400"/74], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40) getitimer(0x0, &(0x7f0000000200)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$IOMMU_DESTROY$hwpt(r1, 0x3b80, &(0x7f0000000040)={0x8}) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00031f000000fddbdf25020000000c003200010000000a0009000180c2000001000005002f0001000000080039000000000008003c000400"/74], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) getitimer(0x0, &(0x7f0000000200)) (async) 00:42:06 executing program 2: socketpair(0x6, 0x5, 0x8, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9008040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x800) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000180)={0x1, 0x6}, 0x2) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x7f1e1dbb83cfbe36, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) 00:42:06 executing program 2: socketpair(0x6, 0x5, 0x8, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x9008040}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x800) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000180)={0x1, 0x6}, 0x2) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x7f1e1dbb83cfbe36, 0xffffffffffffffff, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)) 00:42:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8902, 0x0) 00:42:06 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) futex_waitv(&(0x7f0000000100)=[{0x2, &(0x7f0000000000)=0x7, 0x82}, {0x3, &(0x7f0000000040)=0x5, 0x82}], 0x2, 0x0, &(0x7f0000000140)={0x77359400}, 0x1) 00:42:06 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'nicvf0\x00'}}) (async) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x880) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x4, {0x6, 0x7fffffff, 0xb5e}}) 00:42:06 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8901, 0x0) 00:42:06 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) (fail_nth: 4) 00:42:06 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0800a5c67dc7fee3e87adbdf250e00000008003c000200000005003800000000000a000900aaaaaaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40008d1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 00:42:06 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) futex_waitv(&(0x7f0000000100)=[{0x2, &(0x7f0000000000)=0x7, 0x82}, {0x3, &(0x7f0000000040)=0x5, 0x82}], 0x2, 0x0, &(0x7f0000000140)={0x77359400}, 0x1) 00:42:07 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) futex_waitv(&(0x7f0000000100)=[{0x2, &(0x7f0000000000)=0x7, 0x82}, {0x3, &(0x7f0000000040)=0x5, 0x82}], 0x2, 0x0, &(0x7f0000000140)={0x77359400}, 0x1) 00:42:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8902, 0x0) 00:42:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000200)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'nicvf0\x00'}}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_PAN_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x880) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000000c0)=0x14) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x4, {0x6, 0x7fffffff, 0xb5e}}) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000040)={0x0, 0x0, 0x100, 0x4, {0x6, 0x7fffffff, 0xb5e}}) [ 2527.062756][ T7335] FAULT_INJECTION: forcing a failure. [ 2527.062756][ T7335] name failslab, interval 1, probability 0, space 0, times 0 00:42:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8903, 0x0) 00:42:07 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0800a5c67dc7fee3e87adbdf250e00000008003c000200000005003800000000000a000900aaaaaaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40008d1) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) [ 2527.081671][ T7335] CPU: 0 PID: 7335 Comm: syz-executor.0 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2527.084294][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2527.086910][ T7335] Call trace: [ 2527.087775][ T7335] dump_backtrace+0x1b8/0x1e4 [ 2527.089017][ T7335] show_stack+0x2c/0x44 [ 2527.090160][ T7335] dump_stack_lvl+0xd0/0x124 [ 2527.091376][ T7335] dump_stack+0x1c/0x28 [ 2527.092475][ T7335] should_fail_ex+0x3f8/0x5c4 [ 2527.093723][ T7335] __should_failslab+0xc8/0x128 [ 2527.095092][ T7335] should_failslab+0x10/0x28 [ 2527.096410][ T7335] __kmem_cache_alloc_node+0x80/0x37c [ 2527.097865][ T7335] kmalloc_trace+0x3c/0x88 [ 2527.099079][ T7335] smack_sk_alloc_security+0xf4/0x214 [ 2527.100514][ T7335] security_sk_alloc+0x80/0xbc [ 2527.101845][ T7335] sk_prot_alloc+0xe0/0x1f0 [ 2527.103055][ T7335] sk_alloc+0x44/0x3f4 [ 2527.104155][ T7335] packet_create+0xf0/0x7a4 [ 2527.105412][ T7335] __sock_create+0x43c/0x884 [ 2527.106673][ T7335] __sys_socket+0x134/0x340 [ 2527.107804][ T7335] __arm64_sys_socket+0x7c/0x94 [ 2527.109113][ T7335] invoke_syscall+0x98/0x2b8 [ 2527.110289][ T7335] el0_svc_common+0x130/0x23c [ 2527.111681][ T7335] do_el0_svc+0x48/0x58 [ 2527.112793][ T7335] el0_svc+0x54/0x158 [ 2527.113905][ T7335] el0t_64_sync_handler+0x84/0xfc [ 2527.115248][ T7335] el0t_64_sync+0x190/0x194 00:42:07 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) 00:42:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8904, 0x0) 00:42:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, '\x00', @bt={0x7ff, 0x7, 0x2, 0x8, 0x9, 0x1f, 0x0, 0x6}}) 00:42:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8903, 0x0) 00:42:07 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) (fail_nth: 5) 00:42:07 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0800a5c67dc7fee3e87adbdf250e00000008003c000200000005003800000000000a000900aaaaaaaaaa"], 0x30}, 0x1, 0x0, 0x0, 0x884}, 0x40008d1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 00:42:07 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) 00:42:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, '\x00', @bt={0x7ff, 0x7, 0x2, 0x8, 0x9, 0x1f, 0x0, 0x6}}) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, '\x00', @bt={0x7ff, 0x7, 0x2, 0x8, 0x9, 0x1f, 0x0, 0x6}}) (async) 00:42:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8906, 0x0) 00:42:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8904, 0x0) [ 2527.243427][ T7359] FAULT_INJECTION: forcing a failure. [ 2527.243427][ T7359] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.246752][ T7359] CPU: 1 PID: 7359 Comm: syz-executor.0 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2527.249455][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2527.252095][ T7359] Call trace: [ 2527.253077][ T7359] dump_backtrace+0x1b8/0x1e4 [ 2527.254316][ T7359] show_stack+0x2c/0x44 [ 2527.255494][ T7359] dump_stack_lvl+0xd0/0x124 [ 2527.256698][ T7359] dump_stack+0x1c/0x28 [ 2527.257867][ T7359] should_fail_ex+0x3f8/0x5c4 [ 2527.259224][ T7359] __should_failslab+0xc8/0x128 [ 2527.260462][ T7359] should_failslab+0x10/0x28 [ 2527.261729][ T7359] slab_pre_alloc_hook+0x6c/0x334 [ 2527.263117][ T7359] kmem_cache_alloc_lru+0x54/0x394 [ 2527.264506][ T7359] __d_alloc+0x40/0x6ac [ 2527.265635][ T7359] d_alloc_pseudo+0x28/0x8c [ 2527.266809][ T7359] alloc_file_pseudo+0x110/0x278 [ 2527.268169][ T7359] sock_alloc_file+0xb8/0x268 [ 2527.269423][ T7359] __sys_socket+0x1b4/0x340 [ 2527.270695][ T7359] __arm64_sys_socket+0x7c/0x94 [ 2527.271996][ T7359] invoke_syscall+0x98/0x2b8 [ 2527.273222][ T7359] el0_svc_common+0x130/0x23c [ 2527.274497][ T7359] do_el0_svc+0x48/0x58 [ 2527.275699][ T7359] el0_svc+0x54/0x158 [ 2527.276817][ T7359] el0t_64_sync_handler+0x84/0xfc [ 2527.278245][ T7359] el0t_64_sync+0x190/0x194 00:42:07 executing program 2: socketpair(0xb, 0x2, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x1007, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x5}, {0xa, 0x4e20, 0x5, @private1, 0x101}, 0xffffffffffffffff, {[0x10001, 0x3, 0x5, 0x1, 0x7fff, 0x80000000, 0x1, 0x7]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e22, 0xf91c, @remote, 0x100}, 0xffffffffffffffff, {[0x10000, 0x10000, 0x9, 0x0, 0x1339, 0x8, 0x0, 0x8]}}, 0x5c) 00:42:07 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) 00:42:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8907, 0x0) 00:42:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8906, 0x0) 00:42:07 executing program 2: socketpair(0xb, 0x2, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x1007, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x5}, {0xa, 0x4e20, 0x5, @private1, 0x101}, 0xffffffffffffffff, {[0x10001, 0x3, 0x5, 0x1, 0x7fff, 0x80000000, 0x1, 0x7]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e22, 0xf91c, @remote, 0x100}, 0xffffffffffffffff, {[0x10000, 0x10000, 0x9, 0x0, 0x1339, 0x8, 0x0, 0x8]}}, 0x5c) 00:42:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890b, 0x0) 00:42:07 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) (fail_nth: 6) 00:42:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8907, 0x0) 00:42:07 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={0x0, @empty}, &(0x7f0000001240)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800d0}, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)=0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000001100)={0x38, 0x2, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x38}) connect$nfc_raw(r4, &(0x7f0000001140)={0x27, r10, 0x1, 0x1}, 0x10) write$6lowpan_control(r8, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 00:42:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, '\x00', @bt={0x7ff, 0x7, 0x2, 0x8, 0x9, 0x1f, 0x0, 0x6}}) (rerun: 32) 00:42:07 executing program 2: socketpair(0xb, 0x2, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x1007, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x5}, {0xa, 0x4e20, 0x5, @private1, 0x101}, 0xffffffffffffffff, {[0x10001, 0x3, 0x5, 0x1, 0x7fff, 0x80000000, 0x1, 0x7]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e22, 0xf91c, @remote, 0x100}, 0xffffffffffffffff, {[0x10000, 0x10000, 0x9, 0x0, 0x1339, 0x8, 0x0, 0x8]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e21, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, {0xa, 0x4e22, 0xf91c, @remote, 0x100}, 0xffffffffffffffff, {[0x10000, 0x10000, 0x9, 0x0, 0x1339, 0x8, 0x0, 0x8]}}, 0x5c) 00:42:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890c, 0x0) 00:42:07 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) (async) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) (async) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) (async) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={0x0, @empty}, &(0x7f0000001240)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800d0}, 0x80000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)=0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000001100)={0x38, 0x2, r3}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x38}) connect$nfc_raw(r4, &(0x7f0000001140)={0x27, r10, 0x1, 0x1}, 0x10) write$6lowpan_control(r8, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) [ 2527.534911][ T7397] FAULT_INJECTION: forcing a failure. [ 2527.534911][ T7397] name failslab, interval 1, probability 0, space 0, times 0 00:42:07 executing program 2: socketpair(0x27, 0x5, 0x0, &(0x7f0000000000)) [ 2527.547828][ T7397] CPU: 1 PID: 7397 Comm: syz-executor.0 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2527.550468][ T7397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2527.553294][ T7397] Call trace: [ 2527.554239][ T7397] dump_backtrace+0x1b8/0x1e4 [ 2527.555586][ T7397] show_stack+0x2c/0x44 [ 2527.556670][ T7397] dump_stack_lvl+0xd0/0x124 [ 2527.557849][ T7397] dump_stack+0x1c/0x28 [ 2527.558928][ T7397] should_fail_ex+0x3f8/0x5c4 [ 2527.560190][ T7397] __should_failslab+0xc8/0x128 [ 2527.561387][ T7397] should_failslab+0x10/0x28 [ 2527.562636][ T7397] kmem_cache_alloc+0x80/0x424 [ 2527.563911][ T7397] alloc_empty_file+0xac/0x1d4 [ 2527.565121][ T7397] alloc_file+0x64/0x55c [ 2527.566335][ T7397] alloc_file_pseudo+0x1e0/0x278 [ 2527.567610][ T7397] sock_alloc_file+0xb8/0x268 [ 2527.568900][ T7397] __sys_socket+0x1b4/0x340 [ 2527.570084][ T7397] __arm64_sys_socket+0x7c/0x94 [ 2527.571547][ T7397] invoke_syscall+0x98/0x2b8 [ 2527.572821][ T7397] el0_svc_common+0x130/0x23c [ 2527.574118][ T7397] do_el0_svc+0x48/0x58 [ 2527.575266][ T7397] el0_svc+0x54/0x158 [ 2527.576348][ T7397] el0t_64_sync_handler+0x84/0xfc [ 2527.577721][ T7397] el0t_64_sync+0x190/0x194 00:42:07 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={0x0, @empty}, &(0x7f0000001240)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800d0}, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)=0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000001100)={0x38, 0x2, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x38}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x38}) connect$nfc_raw(r4, &(0x7f0000001140)={0x27, r10, 0x1, 0x1}, 0x10) write$6lowpan_control(r8, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 00:42:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890b, 0x0) 00:42:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)=@userptr={0x4, 0x7, 0x4, 0x400, 0x8, {0x0, 0x2710}, {0x1, 0x2, 0x3f, 0x7, 0x81, 0x4, "9e4de5eb"}, 0x2, 0x2, {}, 0x4, 0x0, r1}) getsockname$packet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000180)={0x81, "fcaf392c7824629530397bc2f2e32f429d333b7dfabba83ed2fb0961427abec6", 0x1000, 0x3232, 0x14e, 0x4, 0x2}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:07 executing program 2: socketpair(0x27, 0x5, 0x0, &(0x7f0000000000)) 00:42:07 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) (fail_nth: 7) 00:42:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8912, 0x0) 00:42:07 executing program 2: socketpair(0x27, 0x5, 0x0, &(0x7f0000000000)) 00:42:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x890c, 0x0) 00:42:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async, rerun: 32) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)=@userptr={0x4, 0x7, 0x4, 0x400, 0x8, {0x0, 0x2710}, {0x1, 0x2, 0x3f, 0x7, 0x81, 0x4, "9e4de5eb"}, 0x2, 0x2, {}, 0x4, 0x0, r1}) (rerun: 32) getsockname$packet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (async) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000180)={0x81, "fcaf392c7824629530397bc2f2e32f429d333b7dfabba83ed2fb0961427abec6", 0x1000, 0x3232, 0x14e, 0x4, 0x2}) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) [ 2527.814014][ T7420] FAULT_INJECTION: forcing a failure. [ 2527.814014][ T7420] name failslab, interval 1, probability 0, space 0, times 0 [ 2527.817463][ T7420] CPU: 0 PID: 7420 Comm: syz-executor.0 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2527.819983][ T7420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2527.822762][ T7420] Call trace: [ 2527.823649][ T7420] dump_backtrace+0x1b8/0x1e4 [ 2527.824893][ T7420] show_stack+0x2c/0x44 [ 2527.826006][ T7420] dump_stack_lvl+0xd0/0x124 [ 2527.827271][ T7420] dump_stack+0x1c/0x28 [ 2527.828391][ T7420] should_fail_ex+0x3f8/0x5c4 [ 2527.829762][ T7420] __should_failslab+0xc8/0x128 [ 2527.831043][ T7420] should_failslab+0x10/0x28 [ 2527.832286][ T7420] kmem_cache_alloc+0x80/0x424 [ 2527.833638][ T7420] security_file_alloc+0x30/0x124 [ 2527.835113][ T7420] init_file+0x9c/0x224 [ 2527.836277][ T7420] alloc_empty_file+0xc0/0x1d4 [ 2527.837563][ T7420] alloc_file+0x64/0x55c [ 2527.838797][ T7420] alloc_file_pseudo+0x1e0/0x278 [ 2527.840020][ T7420] sock_alloc_file+0xb8/0x268 [ 2527.841296][ T7420] __sys_socket+0x1b4/0x340 [ 2527.842525][ T7420] __arm64_sys_socket+0x7c/0x94 [ 2527.843822][ T7420] invoke_syscall+0x98/0x2b8 [ 2527.844969][ T7420] el0_svc_common+0x130/0x23c [ 2527.846253][ T7420] do_el0_svc+0x48/0x58 [ 2527.847372][ T7420] el0_svc+0x54/0x158 [ 2527.848453][ T7420] el0t_64_sync_handler+0x84/0xfc [ 2527.849827][ T7420] el0t_64_sync+0x190/0x194 00:42:07 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @remote}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x8f0, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x21c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0xff59}, {0x8, 0x4, 0x97}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4b}}}]}}, {{0x8, 0x1, r9}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9f0}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x8f0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 00:42:07 executing program 2: ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38}) socketpair(0x38, 0x80001, 0xfffffffd, &(0x7f0000000040)) 00:42:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8914, 0x0) 00:42:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8912, 0x0) 00:42:07 executing program 2: ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38}) socketpair(0x38, 0x80001, 0xfffffffd, &(0x7f0000000040)) 00:42:07 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)=@userptr={0x4, 0x7, 0x4, 0x400, 0x8, {0x0, 0x2710}, {0x1, 0x2, 0x3f, 0x7, 0x81, 0x4, "9e4de5eb"}, 0x2, 0x2, {}, 0x4, 0x0, r1}) (async, rerun: 32) getsockname$packet(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x14) (rerun: 32) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000180)={0x81, "fcaf392c7824629530397bc2f2e32f429d333b7dfabba83ed2fb0961427abec6", 0x1000, 0x3232, 0x14e, 0x4, 0x2}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:07 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @remote}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x8f0, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x21c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0xff59}, {0x8, 0x4, 0x97}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4b}}}]}}, {{0x8, 0x1, r9}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9f0}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x8f0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 00:42:07 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) (fail_nth: 8) 00:42:07 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8914, 0x0) 00:42:07 executing program 2: ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38}) (async) socketpair(0x38, 0x80001, 0xfffffffd, &(0x7f0000000040)) 00:42:07 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @remote, @remote}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000d00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000cc0)={&(0x7f00000003c0)={0x8f0, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{0x8, 0x1, r4}, {0x168, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x104, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7ff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x21c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0xff59}, {0x8, 0x4, 0x97}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4b}}}]}}, {{0x8, 0x1, r9}, {0x1f0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9f0}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x8f0}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 00:42:08 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) 00:42:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8915, 0x0) [ 2528.083946][ T7457] FAULT_INJECTION: forcing a failure. [ 2528.083946][ T7457] name fail_usercopy, interval 1, probability 0, space 0, times 0 00:42:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8915, 0x0) [ 2528.104249][ T7457] CPU: 1 PID: 7457 Comm: syz-executor.0 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2528.106964][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2528.109650][ T7457] Call trace: [ 2528.110503][ T7457] dump_backtrace+0x1b8/0x1e4 [ 2528.111945][ T7457] show_stack+0x2c/0x44 [ 2528.112994][ T7457] dump_stack_lvl+0xd0/0x124 [ 2528.114288][ T7457] dump_stack+0x1c/0x28 [ 2528.115322][ T7457] should_fail_ex+0x3f8/0x5c4 [ 2528.116601][ T7457] should_fail+0x14/0x24 [ 2528.117836][ T7457] should_fail_usercopy+0x20/0x30 [ 2528.119217][ T7457] simple_read_from_buffer+0xd4/0x248 [ 2528.120633][ T7457] proc_fail_nth_read+0x134/0x1a0 [ 2528.121974][ T7457] vfs_read+0x284/0x8d4 [ 2528.123176][ T7457] ksys_read+0x15c/0x26c [ 2528.124358][ T7457] __arm64_sys_read+0x7c/0x90 [ 2528.125535][ T7457] invoke_syscall+0x98/0x2b8 [ 2528.126763][ T7457] el0_svc_common+0x130/0x23c [ 2528.128031][ T7457] do_el0_svc+0x48/0x58 [ 2528.129176][ T7457] el0_svc+0x54/0x158 [ 2528.130319][ T7457] el0t_64_sync_handler+0x84/0xfc [ 2528.131719][ T7457] el0t_64_sync+0x190/0x194 00:42:08 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:08 executing program 1: syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) (async) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) 00:42:08 executing program 2: socketpair(0xa, 0x5, 0xffffffff, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x40c9f3, 0x7494c3) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) syz_io_uring_setup(0x563c, &(0x7f00000000c0)={0x0, 0x5664, 0x1, 0x3, 0x10e}, &(0x7f0000000140), &(0x7f0000000180)) 00:42:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8916, 0x0) 00:42:08 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) 00:42:08 executing program 2: socketpair(0xa, 0x5, 0xffffffff, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x40c9f3, 0x7494c3) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) (async) syz_io_uring_setup(0x563c, &(0x7f00000000c0)={0x0, 0x5664, 0x1, 0x3, 0x10e}, &(0x7f0000000140), &(0x7f0000000180)) 00:42:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8916, 0x0) 00:42:08 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8917, 0x0) 00:42:08 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:08 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x64}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) (async, rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, 0x0) 00:42:08 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:42:08 executing program 2: socketpair(0xa, 0x5, 0xffffffff, &(0x7f0000000040)) r0 = syz_open_dev$dri(&(0x7f0000000200), 0x40c9f3, 0x7494c3) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) syz_io_uring_setup(0x563c, &(0x7f00000000c0)={0x0, 0x5664, 0x1, 0x3, 0x10e}, &(0x7f0000000140), &(0x7f0000000180)) socketpair(0xa, 0x5, 0xffffffff, &(0x7f0000000040)) (async) syz_open_dev$dri(&(0x7f0000000200), 0x40c9f3, 0x7494c3) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r2) (async) syz_io_uring_setup(0x563c, &(0x7f00000000c0)={0x0, 0x5664, 0x1, 0x3, 0x10e}, &(0x7f0000000140), &(0x7f0000000180)) (async) 00:42:08 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 00:42:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8918, 0x0) 00:42:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8917, 0x0) 00:42:08 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x2, 0x2, 0x300) 00:42:08 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:42:08 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c001}, 0x4011) socketpair(0x1d, 0x3, 0x0, &(0x7f0000000040)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38}) 00:42:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8919, 0x0) 00:42:08 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8918, 0x0) 00:42:08 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) [ 2528.548365][ T7507] can: request_module (can-proto-0) failed. 00:42:10 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:10 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:10 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c001}, 0x4011) (async) socketpair(0x1d, 0x3, 0x0, &(0x7f0000000040)) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38}) 00:42:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891a, 0x0) 00:42:10 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x2d, 0x2, 0x300) 00:42:10 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8919, 0x0) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) [ 2531.080342][ T7520] can: request_module (can-proto-0) failed. 00:42:11 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80000001}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004c001}, 0x4011) (async) socketpair(0x1d, 0x3, 0x0, &(0x7f0000000040)) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38}) 00:42:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891b, 0x0) 00:42:11 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 00:42:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891a, 0x0) 00:42:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0x4) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891c, 0x0) 00:42:11 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) [ 2531.176038][ T7538] can: request_module (can-proto-0) failed. 00:42:11 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x2f, 0x2, 0x300) 00:42:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891b, 0x0) 00:42:11 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1405, 0x400, 0x70bd25, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c8a0}, 0x4000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x0, @private2, 0x1000}, {0xa, 0x4e20, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0xffffffffffffffff, {[0x8, 0x3, 0x3, 0x9, 0x7, 0x0, 0x20, 0x8]}}, 0x5c) socket$inet(0x2, 0x6, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'vlan0\x00'}}, 0x1e) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x5, "83acd0a173a1b78fb2ff0960ed528ab9fb1a052d54105ca75c1b63c7a61d53cc"}) 00:42:11 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 00:42:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8933, 0x0) 00:42:11 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1405, 0x400, 0x70bd25, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c8a0}, 0x4000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x0, @private2, 0x1000}, {0xa, 0x4e20, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0xffffffffffffffff, {[0x8, 0x3, 0x3, 0x9, 0x7, 0x0, 0x20, 0x8]}}, 0x5c) (async) socket$inet(0x2, 0x6, 0x0) (async) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'vlan0\x00'}}, 0x1e) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x5, "83acd0a173a1b78fb2ff0960ed528ab9fb1a052d54105ca75c1b63c7a61d53cc"}) 00:42:11 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 00:42:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0x4) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) 00:42:11 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) 00:42:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8940, 0x0) 00:42:11 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 00:42:11 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1405, 0x400, 0x70bd25, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c8a0}, 0x4000000) (async) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x0, @private2, 0x1000}, {0xa, 0x4e20, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0xffffffffffffffff, {[0x8, 0x3, 0x3, 0x9, 0x7, 0x0, 0x20, 0x8]}}, 0x5c) (async) socket$inet(0x2, 0x6, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'vlan0\x00'}}, 0x1e) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x5, "83acd0a173a1b78fb2ff0960ed528ab9fb1a052d54105ca75c1b63c7a61d53cc"}) 00:42:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x891c, 0x0) 00:42:11 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @initdev}, &(0x7f0000000100)=0xc) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) 00:42:11 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 2', 0x1e) 00:42:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8941, 0x0) 00:42:11 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @initdev}, &(0x7f0000000100)=0xc) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) 00:42:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8933, 0x0) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x60) 00:42:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x3, 0x300) 00:42:11 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @initdev}, &(0x7f0000000100)=0xc) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @initdev}, &(0x7f0000000100)=0xc) (async) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) (async) 00:42:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x894c, 0x0) 00:42:11 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x4, 0x300) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x60) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x60) (async) 00:42:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8940, 0x0) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x60) 00:42:11 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0xa, @sdr={0x384c4150}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) read$rfkill(r3, &(0x7f0000000080), 0x8) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:42:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8941, 0x0) 00:42:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8953, 0x0) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:42:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) socket$packet(0x11, 0x3, 0x300) 00:42:11 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0xa, @sdr={0x384c4150}}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) read$rfkill(r3, &(0x7f0000000080), 0x8) 00:42:11 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 00:42:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8954, 0x0) 00:42:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x894c, 0x0) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 2', 0x1b) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:11 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r2 = syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0xa, @sdr={0x384c4150}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) read$rfkill(r3, &(0x7f0000000080), 0x8) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) socket$igmp6(0xa, 0x3, 0x2) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2) (async) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000140)={0xa, @sdr={0x384c4150}}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) read$rfkill(r3, &(0x7f0000000080), 0x8) (async) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 2', 0x1b) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:11 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x68203, 0x0) socketpair(0x3, 0x4, 0xffff, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/83, 0x53, 0x1, &(0x7f0000000480)=""/130, 0x82}, &(0x7f0000000580)=0x40) socketpair(0xa, 0x3, 0x2000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000240)={0x20, 0x0, 0x7, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r5, 0x80845663, 0x0) r6 = syz_open_dev$radio(&(0x7f00000005c0), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000600)={0x2357, 0x2, 0x6, 0x80, 0x80}) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f00000000c0)={0x7, "db16db02b31acf33e7c9a3ec21b7835b21835d3097c17e8d643e0ec839697b37", 0x10, 0x0, 0x5, 0x8, 0x1}) 00:42:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) socket$packet(0x11, 0x3, 0x300) 00:42:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8955, 0x0) 00:42:11 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x302) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 2', 0x1b) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 2', 0x1b) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) 00:42:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8953, 0x0) 00:42:11 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x68203, 0x0) socketpair(0x3, 0x4, 0xffff, &(0x7f00000003c0)) (async) socketpair(0x3, 0x4, 0xffff, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/83, 0x53, 0x1, &(0x7f0000000480)=""/130, 0x82}, &(0x7f0000000580)=0x40) socketpair(0xa, 0x3, 0x2000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000240)={0x20, 0x0, 0x7, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]}) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000240)={0x20, 0x0, 0x7, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r5, 0x80845663, 0x0) r6 = syz_open_dev$radio(&(0x7f00000005c0), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000600)={0x2357, 0x2, 0x6, 0x80, 0x80}) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f00000000c0)={0x7, "db16db02b31acf33e7c9a3ec21b7835b21835d3097c17e8d643e0ec839697b37", 0x10, 0x0, 0x5, 0x8, 0x1}) (async) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f00000000c0)={0x7, "db16db02b31acf33e7c9a3ec21b7835b21835d3097c17e8d643e0ec839697b37", 0x10, 0x0, 0x5, 0x8, 0x1}) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 00:42:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8954, 0x0) 00:42:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8982, 0x0) 00:42:11 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x68203, 0x0) socketpair(0x3, 0x4, 0xffff, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/83, 0x53, 0x1, &(0x7f0000000480)=""/130, 0x82}, &(0x7f0000000580)=0x40) socketpair(0xa, 0x3, 0x2000, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000240)={0x20, 0x0, 0x7, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) r5 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r5, 0x80845663, 0x0) r6 = syz_open_dev$radio(&(0x7f00000005c0), 0x3, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000600)={0x2357, 0x2, 0x6, 0x80, 0x80}) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f00000000c0)={0x7, "db16db02b31acf33e7c9a3ec21b7835b21835d3097c17e8d643e0ec839697b37", 0x10, 0x0, 0x5, 0x8, 0x1}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x68203, 0x0) (async) socketpair(0x3, 0x4, 0xffff, &(0x7f00000003c0)) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/83, 0x53, 0x1, &(0x7f0000000480)=""/130, 0x82}, &(0x7f0000000580)=0x40) (async) socketpair(0xa, 0x3, 0x2000, &(0x7f0000000040)) (async) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000240)={0x20, 0x0, 0x7, 0x0, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}]}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000280)=0x14) (async) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x20}, @BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r5, 0x80845663, 0x0) (async) syz_open_dev$radio(&(0x7f00000005c0), 0x3, 0x2) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000600)={0x2357, 0x2, 0x6, 0x80, 0x80}) (async) ioctl$VIDIOC_G_MODULATOR(r5, 0xc0445636, &(0x7f00000000c0)={0x7, "db16db02b31acf33e7c9a3ec21b7835b21835d3097c17e8d643e0ec839697b37", 0x10, 0x0, 0x5, 0x8, 0x1}) (async) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 00:42:11 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x304) 00:42:11 executing program 1: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x1, 0x8000, 0x0, 0x8}, {0x4, 0x7, 0xb96, 0xce6}, {0xa2c5, 0xfffffe01}}) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) 00:42:11 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 2', 0x1b) 00:42:11 executing program 2: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8955, 0x0) 00:42:11 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8983, 0x0) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r2}) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x101, 0x2, {0x401, 0x8, 0x1, 0x55ff4a21}}) 00:42:11 executing program 1: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x1, 0x8000, 0x0, 0x8}, {0x4, 0x7, 0xb96, 0xce6}, {0xa2c5, 0xfffffe01}}) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x1, 0x8000, 0x0, 0x8}, {0x4, 0x7, 0xb96, 0xce6}, {0xa2c5, 0xfffffe01}}) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) (async) 00:42:11 executing program 2: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async, rerun: 64) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (rerun: 64) 00:42:11 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r2}) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x101, 0x2, {0x401, 0x8, 0x1, 0x55ff4a21}}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r2}) (async) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x101, 0x2, {0x401, 0x8, 0x1, 0x55ff4a21}}) (async) 00:42:11 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x305) 00:42:11 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8982, 0x0) 00:42:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x89a0, 0x0) 00:42:12 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r2}) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x101, 0x2, {0x401, 0x8, 0x1, 0x55ff4a21}}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x1, r2}) (async) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r3, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x101, 0x2, {0x401, 0x8, 0x1, 0x55ff4a21}}) (async) 00:42:12 executing program 2: mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) (async) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) 00:42:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x8983, 0x0) 00:42:12 executing program 1: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x1, 0x8000, 0x0, 0x8}, {0x4, 0x7, 0xb96, 0xce6}, {0xa2c5, 0xfffffe01}}) (async, rerun: 32) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) 00:42:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x89a1, 0x0) 00:42:12 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 00:42:12 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x9c, @local, 'gre0\x00'}}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:12 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x307) 00:42:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x89a0, 0x0) 00:42:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x400448c9, 0x0) 00:42:12 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) 00:42:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r5}) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:12 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x9c, @local, 'gre0\x00'}}) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:12 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) (async) 00:42:12 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x9c, @local, 'gre0\x00'}}) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r5}) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r5}) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x400448dd, 0x0) 00:42:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x89a1, 0x0) 00:42:12 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x308) 00:42:12 executing program 3: r0 = io_uring_setup(0x385a, &(0x7f0000000000)={0x0, 0x5ca8, 0x800, 0x1, 0x3e4}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x110, r0, 0x8000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 00:42:12 executing program 3: r0 = io_uring_setup(0x385a, &(0x7f0000000000)={0x0, 0x5ca8, 0x800, 0x1, 0x3e4}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x110, r0, 0x8000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 00:42:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x400448c9, 0x0) 00:42:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x400454ca, 0x0) 00:42:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r5}) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:12 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r5}) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:12 executing program 3: r0 = io_uring_setup(0x385a, &(0x7f0000000000)={0x0, 0x5ca8, 0x800, 0x1, 0x3e4}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, 0x110, r0, 0x8000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 1', 0x1b) (async) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000100)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 00:42:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x400448dd, 0x0) 00:42:12 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x322) 00:42:12 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x40049409, 0x0) 00:42:12 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x135100) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f0000000040), &(0x7f0000000100)}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x24000, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r2 = syz_open_dev$radio(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000200)={0x1, "e33a95a2eaff515095d22167460f39ab5f00", 0x3, 0xd3b, 0x9, 0x400, 0x2}) 00:42:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r5}) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:12 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x135100) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f0000000040), &(0x7f0000000100)}) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x24000, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) r2 = syz_open_dev$radio(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000200)={0x1, "e33a95a2eaff515095d22167460f39ab5f00", 0x3, 0xd3b, 0x9, 0x400, 0x2}) 00:42:12 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x135100) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f0000000040), &(0x7f0000000100)}) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f0000000040), &(0x7f0000000100)}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x24000, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) syz_open_dev$radio(&(0x7f00000001c0), 0x0, 0x2) (async) r2 = syz_open_dev$radio(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000200)={0x1, "e33a95a2eaff515095d22167460f39ab5f00", 0x3, 0xd3b, 0x9, 0x400, 0x2}) 00:42:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x400454ca, 0x0) 00:42:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x40086602, 0x0) 00:42:12 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r4, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r5}) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:12 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:12 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:12 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000040)=0x2, 0x4) 00:42:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x40049409, 0x0) 00:42:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x40186366, 0x0) 00:42:12 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:12 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) 00:42:12 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000140)={0x0, 0x1, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r3, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x1, r4}) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x401c5820, 0x0) 00:42:12 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x40086602, 0x0) 00:42:12 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) write$6lowpan_control(r1, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:12 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000140)) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:12 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) write$6lowpan_control(r1, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:12 executing program 0: socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000040)=0x2, 0x4) 00:42:12 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) 00:42:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x40186366, 0x0) 00:42:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x4020940d, 0x0) 00:42:12 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:12 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) write$6lowpan_control(r1, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) (async) write$6lowpan_control(r1, &(0x7f0000000080)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) 00:42:12 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x1}) 00:42:12 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) (async) 00:42:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x80086301, 0x0) 00:42:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x401c5820, 0x0) 00:42:12 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:12 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000040)=0x2, 0x4) 00:42:12 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x1}) 00:42:12 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async, rerun: 64) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x4000, 0x1}) (rerun: 64) 00:42:12 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x80086601, 0x0) 00:42:12 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x4020940d, 0x0) 00:42:12 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:12 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) (async) syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) 00:42:13 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x80108906, 0x0) 00:42:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x80086301, 0x0) 00:42:13 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:13 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 00:42:13 executing program 3: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x5, [0x9, 0x3]}, {0x80000000, 0x0, 0x5, [0x1, 0x9]}, 0x10000000, [0x80, 0x5]}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000280)) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x40) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) 00:42:13 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x8, 0xffff, @value=0x78}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040014}, 0x40080) 00:42:13 executing program 3: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x5, [0x9, 0x3]}, {0x80000000, 0x0, 0x5, [0x1, 0x9]}, 0x10000000, [0x80, 0x5]}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000280)) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x40) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x5, [0x9, 0x3]}, {0x80000000, 0x0, 0x5, [0x1, 0x9]}, 0x10000000, [0x80, 0x5]}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000280)) (async) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x40) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) 00:42:13 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x80108907, 0x0) 00:42:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x80086601, 0x0) 00:42:13 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x8, 0xffff, @value=0x78}) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040014}, 0x40080) 00:42:13 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:13 executing program 3: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x5, [0x9, 0x3]}, {0x80000000, 0x0, 0x5, [0x1, 0x9]}, 0x10000000, [0x80, 0x5]}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000280)) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x40) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x5, [0x9, 0x3]}, {0x80000000, 0x0, 0x5, [0x1, 0x9]}, 0x10000000, [0x80, 0x5]}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000280)) (async) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) (async) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000001c0)=0x14) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r2, 0x40) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) 00:42:13 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) 00:42:13 executing program 1: r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x8, 0xffff, @value=0x78}) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040014}, 0x40080) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) (async) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000140)={0x8, 0xffff, @value=0x78}) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040014}, 0x40080) (async) 00:42:13 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x801c581f, 0x0) 00:42:13 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x80108906, 0x0) 00:42:13 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x27, 0x2, 0x1, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:13 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x27, 0x2, 0x1, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:13 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0045878, 0x0) 00:42:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x80108907, 0x0) 00:42:13 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:13 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x27, 0x2, 0x1, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socketpair(0x27, 0x2, 0x1, &(0x7f0000000180)) (async) ioctl$PPPOEIOCDFWD(r2, 0xb101, 0x0) (async) sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) 00:42:13 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:13 executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:13 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) 00:42:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x801c581f, 0x0) 00:42:13 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) 00:42:13 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0045878, 0x0) 00:42:13 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:13 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:13 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:13 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0189436, 0x0) 00:42:13 executing program 2: socket$packet(0x11, 0x3, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0045878, 0x0) 00:42:13 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x486901, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 00:42:13 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:13 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$cdc_ncm(0x1, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "9798708ee4d1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x219, 0x401, 0x3, 0x1f}, {0x6, 0x24, 0x1a, 0x9, 0x2c}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1600, 0x9, 0x413}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x40, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x7, 0x7}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7f, 0x8, 0x1, 0x20, 0x8}, 0xac, &(0x7f00000000c0)={0x5, 0xf, 0xac, 0x6, [@generic={0x8c, 0x10, 0xa, "cb0bf58959aac7d61d2ec0fc565bcd4acf1e9ad5b27d802112b9462f6913051c30b425c427a414c1420c04bae3ee90cc670bc2499c54a9e30a8ee92ed1fbb5f9b0f826f77945e015a4549807fd774b418854c44cd56e666e2747b7f58cd2b6740c2e3826726659d7c582def8a9710fd9dacc4631a4d1544180a98a75db31cd404501fa7e363ac66f4a"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x2, 0x1f}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x8, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xc, 0x7, 0x61e}]}, 0x5, [{0xd3, &(0x7f0000000180)=@string={0xd3, 0x3, "023062d3df1278afca1210a925d2e8b1f45b6a3560e5b28220b95e531eb5d1930397ab9aae88b03d5ca6a88d80bfa29037e4070464f1b9f230aef6fc7d25dbb129d0631811f60777988d5d9e35d3b56c1879574108e7a423f23101c1abcc72f08118dc12f5aa926b42af06b94d513e39dad918f8116888b087dd9d01f97b9cfdac15ad6aa6d5c94be0b568c19f0ba4feb2837f1f540fe7addcce64f483d2b144f733911676a0214362dfe35c36e8a7615c78eec1c008eb055bee5a0789641f2f45a8dccdcb4dbe40a14b51c7198879a288"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x78, &(0x7f0000000300)=@string={0x78, 0x3, "77026d31a34c2be7d94f755762a68191244fa28f8670e725c9d5bb482156b46152d89e436d7f631e9c106217f86ba1ad44b2c2f5b366fb7c852d5d3ceceb96ed8e5c76f84f277cb27d6038a292dc8c10d60f23cea4263ac1a02ab8e841f64adfb6ce3820f31b5b895729ecc128622998dafd4870d1ea"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x380a}}]}) socket$packet(0x11, 0x2, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) write$rfkill(r0, &(0x7f0000000440)={0x3, 0x3, 0x3, 0x0, 0x1}, 0x8) 00:42:13 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc020660b, 0x0) 00:42:13 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x486901, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 00:42:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0045878, 0x0) 00:42:13 executing program 2: socket$packet(0x11, 0x3, 0x300) syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x3, 0x300) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0xff, 0x6, 0x3}, 0x8) 00:42:13 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x486901, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) (async) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 00:42:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0189436, 0x0) 00:42:13 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x1c39c0) 00:42:13 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 00:42:13 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9e3b}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000005) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0xfffff800) 00:42:13 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0xff, 0x6, 0x3}, 0x8) [ 2534.171479][T13980] usb 1-1: new low-speed USB device number 106 using dummy_hcd [ 2534.371501][T13980] usb 1-1: device descriptor read/64, error -71 [ 2534.641475][T13980] usb 1-1: new low-speed USB device number 107 using dummy_hcd [ 2534.831494][T13980] usb 1-1: device descriptor read/64, error -71 [ 2534.963165][T13980] usb usb1-port1: attempt power cycle [ 2535.381546][T13980] usb 1-1: new low-speed USB device number 108 using dummy_hcd [ 2535.481457][T13980] usb 1-1: device descriptor read/8, error -71 [ 2535.751439][T13980] usb 1-1: new low-speed USB device number 109 using dummy_hcd [ 2535.841496][T13980] usb 1-1: device descriptor read/8, error -71 [ 2535.961529][T13980] usb usb1-port1: unable to enumerate USB device 00:42:16 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9e3b}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000005) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0xfffff800) (async) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0xfffff800) 00:42:16 executing program 2: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x1c39c0) 00:42:16 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc020660b, 0x0) 00:42:16 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$cdc_ncm(0x1, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "9798708ee4d1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x219, 0x401, 0x3, 0x1f}, {0x6, 0x24, 0x1a, 0x9, 0x2c}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1600, 0x9, 0x413}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x40, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x7, 0x7}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7f, 0x8, 0x1, 0x20, 0x8}, 0xac, &(0x7f00000000c0)={0x5, 0xf, 0xac, 0x6, [@generic={0x8c, 0x10, 0xa, "cb0bf58959aac7d61d2ec0fc565bcd4acf1e9ad5b27d802112b9462f6913051c30b425c427a414c1420c04bae3ee90cc670bc2499c54a9e30a8ee92ed1fbb5f9b0f826f77945e015a4549807fd774b418854c44cd56e666e2747b7f58cd2b6740c2e3826726659d7c582def8a9710fd9dacc4631a4d1544180a98a75db31cd404501fa7e363ac66f4a"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x2, 0x1f}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x8, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xc, 0x7, 0x61e}]}, 0x5, [{0xd3, &(0x7f0000000180)=@string={0xd3, 0x3, "023062d3df1278afca1210a925d2e8b1f45b6a3560e5b28220b95e531eb5d1930397ab9aae88b03d5ca6a88d80bfa29037e4070464f1b9f230aef6fc7d25dbb129d0631811f60777988d5d9e35d3b56c1879574108e7a423f23101c1abcc72f08118dc12f5aa926b42af06b94d513e39dad918f8116888b087dd9d01f97b9cfdac15ad6aa6d5c94be0b568c19f0ba4feb2837f1f540fe7addcce64f483d2b144f733911676a0214362dfe35c36e8a7615c78eec1c008eb055bee5a0789641f2f45a8dccdcb4dbe40a14b51c7198879a288"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x78, &(0x7f0000000300)=@string={0x78, 0x3, "77026d31a34c2be7d94f755762a68191244fa28f8670e725c9d5bb482156b46152d89e436d7f631e9c106217f86ba1ad44b2c2f5b366fb7c852d5d3ceceb96ed8e5c76f84f277cb27d6038a292dc8c10d60f23cea4263ac1a02ab8e841f64adfb6ce3820f31b5b895729ecc128622998dafd4870d1ea"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x380a}}]}) socket$packet(0x11, 0x2, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) write$rfkill(r0, &(0x7f0000000440)={0x3, 0x3, 0x3, 0x0, 0x1}, 0x8) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) syz_usb_connect$cdc_ncm(0x1, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "9798708ee4d1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x219, 0x401, 0x3, 0x1f}, {0x6, 0x24, 0x1a, 0x9, 0x2c}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1600, 0x9, 0x413}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x40, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x7, 0x7}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7f, 0x8, 0x1, 0x20, 0x8}, 0xac, &(0x7f00000000c0)={0x5, 0xf, 0xac, 0x6, [@generic={0x8c, 0x10, 0xa, "cb0bf58959aac7d61d2ec0fc565bcd4acf1e9ad5b27d802112b9462f6913051c30b425c427a414c1420c04bae3ee90cc670bc2499c54a9e30a8ee92ed1fbb5f9b0f826f77945e015a4549807fd774b418854c44cd56e666e2747b7f58cd2b6740c2e3826726659d7c582def8a9710fd9dacc4631a4d1544180a98a75db31cd404501fa7e363ac66f4a"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x2, 0x1f}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x8, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xc, 0x7, 0x61e}]}, 0x5, [{0xd3, &(0x7f0000000180)=@string={0xd3, 0x3, "023062d3df1278afca1210a925d2e8b1f45b6a3560e5b28220b95e531eb5d1930397ab9aae88b03d5ca6a88d80bfa29037e4070464f1b9f230aef6fc7d25dbb129d0631811f60777988d5d9e35d3b56c1879574108e7a423f23101c1abcc72f08118dc12f5aa926b42af06b94d513e39dad918f8116888b087dd9d01f97b9cfdac15ad6aa6d5c94be0b568c19f0ba4feb2837f1f540fe7addcce64f483d2b144f733911676a0214362dfe35c36e8a7615c78eec1c008eb055bee5a0789641f2f45a8dccdcb4dbe40a14b51c7198879a288"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x78, &(0x7f0000000300)=@string={0x78, 0x3, "77026d31a34c2be7d94f755762a68191244fa28f8670e725c9d5bb482156b46152d89e436d7f631e9c106217f86ba1ad44b2c2f5b366fb7c852d5d3ceceb96ed8e5c76f84f277cb27d6038a292dc8c10d60f23cea4263ac1a02ab8e841f64adfb6ce3820f31b5b895729ecc128622998dafd4870d1ea"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x380a}}]}) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) write$rfkill(r0, &(0x7f0000000440)={0x3, 0x3, 0x3, 0x0, 0x1}, 0x8) (async) 00:42:16 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) 00:42:16 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0xff, 0x6, 0x3}, 0x8) (rerun: 64) 00:42:17 executing program 2: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x1c39c0) 00:42:17 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9e3b}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000005) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0xfffff800) 00:42:17 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x8) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:17 executing program 2: syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x1c39c0) 00:42:17 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:17 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:17 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x1c39c0) [ 2537.321455][T13980] usb 1-1: new low-speed USB device number 110 using dummy_hcd [ 2537.511478][T13980] usb 1-1: device descriptor read/64, error -71 [ 2537.791501][T13980] usb 1-1: new low-speed USB device number 111 using dummy_hcd [ 2537.991453][T13980] usb 1-1: device descriptor read/64, error -71 [ 2538.111760][T13980] usb usb1-port1: attempt power cycle [ 2538.528134][T13980] usb 1-1: new low-speed USB device number 112 using dummy_hcd [ 2538.612309][T13980] usb 1-1: device descriptor read/8, error -71 [ 2538.881425][T13980] usb 1-1: new low-speed USB device number 113 using dummy_hcd [ 2538.971571][T13980] usb 1-1: device descriptor read/8, error -71 [ 2539.091531][T13980] usb usb1-port1: unable to enumerate USB device 00:42:20 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) syz_usb_connect$cdc_ncm(0x1, 0x7c, &(0x7f0000000000)={{0x12, 0x1, 0x100, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x1, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "9798708ee4d1"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x219, 0x401, 0x3, 0x1f}, {0x6, 0x24, 0x1a, 0x9, 0x2c}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1600, 0x9, 0x413}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x0, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x5, 0x40, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xff, 0x7, 0x7}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7f, 0x8, 0x1, 0x20, 0x8}, 0xac, &(0x7f00000000c0)={0x5, 0xf, 0xac, 0x6, [@generic={0x8c, 0x10, 0xa, "cb0bf58959aac7d61d2ec0fc565bcd4acf1e9ad5b27d802112b9462f6913051c30b425c427a414c1420c04bae3ee90cc670bc2499c54a9e30a8ee92ed1fbb5f9b0f826f77945e015a4549807fd774b418854c44cd56e666e2747b7f58cd2b6740c2e3826726659d7c582def8a9710fd9dacc4631a4d1544180a98a75db31cd404501fa7e363ac66f4a"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x2, 0x2, 0x1f}, @ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x2, 0x8, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0xc, 0x7, 0x61e}]}, 0x5, [{0xd3, &(0x7f0000000180)=@string={0xd3, 0x3, "023062d3df1278afca1210a925d2e8b1f45b6a3560e5b28220b95e531eb5d1930397ab9aae88b03d5ca6a88d80bfa29037e4070464f1b9f230aef6fc7d25dbb129d0631811f60777988d5d9e35d3b56c1879574108e7a423f23101c1abcc72f08118dc12f5aa926b42af06b94d513e39dad918f8116888b087dd9d01f97b9cfdac15ad6aa6d5c94be0b568c19f0ba4feb2837f1f540fe7addcce64f483d2b144f733911676a0214362dfe35c36e8a7615c78eec1c008eb055bee5a0789641f2f45a8dccdcb4dbe40a14b51c7198879a288"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x401}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x1007}}, {0x78, &(0x7f0000000300)=@string={0x78, 0x3, "77026d31a34c2be7d94f755762a68191244fa28f8670e725c9d5bb482156b46152d89e436d7f631e9c106217f86ba1ad44b2c2f5b366fb7c852d5d3ceceb96ed8e5c76f84f277cb27d6038a292dc8c10d60f23cea4263ac1a02ab8e841f64adfb6ce3820f31b5b895729ecc128622998dafd4870d1ea"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x380a}}]}) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) write$rfkill(r0, &(0x7f0000000440)={0x3, 0x3, 0x3, 0x0, 0x1}, 0x8) (async) write$rfkill(r0, &(0x7f0000000440)={0x3, 0x3, 0x3, 0x0, 0x1}, 0x8) 00:42:20 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) (async) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x8) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:20 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) (async) 00:42:20 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:20 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x1c39c0) 00:42:20 executing program 1: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 00:42:20 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x1c39c0) 00:42:20 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 00:42:20 executing program 1: socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 00:42:20 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x0) 00:42:20 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 00:42:20 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x8) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) socket$packet(0x11, 0x2, 0x300) (async) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x8) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) [ 2540.551523][T17244] usb 1-1: new low-speed USB device number 114 using dummy_hcd [ 2540.742290][T17244] usb 1-1: device descriptor read/64, error -71 [ 2541.041512][T17244] usb 1-1: new low-speed USB device number 115 using dummy_hcd [ 2541.261444][T17244] usb 1-1: device descriptor read/64, error -71 [ 2541.381519][T17244] usb usb1-port1: attempt power cycle [ 2541.791574][T17244] usb 1-1: new low-speed USB device number 116 using dummy_hcd [ 2541.901433][T17244] usb 1-1: device descriptor read/8, error -71 [ 2542.171491][T17244] usb 1-1: new low-speed USB device number 117 using dummy_hcd [ 2542.281734][T17244] usb 1-1: device descriptor read/8, error -71 [ 2542.403973][T17244] usb usb1-port1: unable to enumerate USB device 00:42:23 executing program 0: socketpair(0x27, 0x5, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x0, @loopback, 0x8}, {0xa, 0x4e21, 0x9, @empty, 0x10001}, 0xffffffffffffffff, {[0x13, 0x7, 0x91b, 0x7, 0x9, 0x10000, 0xfffffc00, 0x100]}}, 0x5c) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) 00:42:23 executing program 1: socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 00:42:23 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x0) 00:42:23 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) 00:42:23 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8000}, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) 00:42:23 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) write$smackfs_labels_list(0xffffffffffffffff, &(0x7f0000000040)={[{'batadv_slave_1\x00'}, {'batadv_slave_1\x00'}, {'batadv_slave_1\x00'}, {'batadv_slave_1\x00'}]}, 0x41) 00:42:23 executing program 2: syz_open_dev$dri(&(0x7f0000000100), 0xffffffffffffffff, 0x0) 00:42:23 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x0, "692f9b7c061d1938f3c9dd1099db36b16f2998c22ca3065a5e0603937cf8d34d", 0x8, 0x4, 0x7fffffff, 0x4, 0x3}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:23 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x0, "692f9b7c061d1938f3c9dd1099db36b16f2998c22ca3065a5e0603937cf8d34d", 0x8, 0x4, 0x7fffffff, 0x4, 0x3}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:23 executing program 2: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x0, "692f9b7c061d1938f3c9dd1099db36b16f2998c22ca3065a5e0603937cf8d34d", 0x8, 0x4, 0x7fffffff, 0x4, 0x3}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:23 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8000}, 0xc) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) 00:42:23 executing program 1: sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="a99a199fcd92c312b17c3870b2aa9f009b0a63f2409ba528ee1bd13f1b3bb62d8f8c77bf187114acd8f2b411fbabb04d043ce36d9add371db52d002cfd55f2d1ed572e315bc85176e1a378360a0162ff07f9751cb9f51bdac7a25b6f9619d5ad212b7dfab29c1aef8d764ff51d59d840728ae4c77c1480b7be0cdb7c6b70e0a2438cbe2420b77df16a546ffe59404b28399d0545f680c8d871a79ca72a6632d066fa5236acd253e76ca14a8e8eb099c1bfd7b244ce40d8dc9ae604530ddd30c02ecda7b119e262b71675d2bdcf5ad88485ea6d7f6b0e0956a220b61ff6647e36d12517e6002eb2", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25050000000c00060002000000020000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x16}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:23 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9e3b}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000005) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0xfffff800) 00:42:23 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) write$smackfs_labels_list(0xffffffffffffffff, &(0x7f0000000040)={[{'batadv_slave_1\x00'}, {'batadv_slave_1\x00'}, {'batadv_slave_1\x00'}, {'batadv_slave_1\x00'}]}, 0x41) 00:42:23 executing program 3: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x0, "692f9b7c061d1938f3c9dd1099db36b16f2998c22ca3065a5e0603937cf8d34d", 0x8, 0x4, 0x7fffffff, 0x4, 0x3}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) 00:42:23 executing program 4: r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8000}, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x0, 0x0, 0x8000}, 0xc) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) (async) 00:42:23 executing program 1: sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="a99a199fcd92c312b17c3870b2aa9f009b0a63f2409ba528ee1bd13f1b3bb62d8f8c77bf187114acd8f2b411fbabb04d043ce36d9add371db52d002cfd55f2d1ed572e315bc85176e1a378360a0162ff07f9751cb9f51bdac7a25b6f9619d5ad212b7dfab29c1aef8d764ff51d59d840728ae4c77c1480b7be0cdb7c6b70e0a2438cbe2420b77df16a546ffe59404b28399d0545f680c8d871a79ca72a6632d066fa5236acd253e76ca14a8e8eb099c1bfd7b244ce40d8dc9ae604530ddd30c02ecda7b119e262b71675d2bdcf5ad88485ea6d7f6b0e0956a220b61ff6647e36d12517e6002eb2", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25050000000c00060002000000020000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x16}, 0x40) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:23 executing program 0: socketpair(0x27, 0x5, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x0, @loopback, 0x8}, {0xa, 0x4e21, 0x9, @empty, 0x10001}, 0xffffffffffffffff, {[0x13, 0x7, 0x91b, 0x7, 0x9, 0x10000, 0xfffffc00, 0x100]}}, 0x5c) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) 00:42:23 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) write$6lowpan_control(r5, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) 00:42:23 executing program 1: sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="a99a199fcd92c312b17c3870b2aa9f009b0a63f2409ba528ee1bd13f1b3bb62d8f8c77bf187114acd8f2b411fbabb04d043ce36d9add371db52d002cfd55f2d1ed572e315bc85176e1a378360a0162ff07f9751cb9f51bdac7a25b6f9619d5ad212b7dfab29c1aef8d764ff51d59d840728ae4c77c1480b7be0cdb7c6b70e0a2438cbe2420b77df16a546ffe59404b28399d0545f680c8d871a79ca72a6632d066fa5236acd253e76ca14a8e8eb099c1bfd7b244ce40d8dc9ae604530ddd30c02ecda7b119e262b71675d2bdcf5ad88485ea6d7f6b0e0956a220b61ff6647e36d12517e6002eb2", @ANYRES16=0x0, @ANYBLOB="000825bd7000fcdbdf25050000000c00060002000000020000000c000600030000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x16}, 0x40) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:23 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x135100) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000180)={0x80000000, &(0x7f0000000040), &(0x7f0000000100)}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280), 0x24000, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r2 = syz_open_dev$radio(&(0x7f00000001c0), 0x0, 0x2) ioctl$VIDIOC_ENUMOUTPUT(r2, 0xc0485630, &(0x7f0000000200)={0x1, "e33a95a2eaff515095d22167460f39ab5f00", 0x3, 0xd3b, 0x9, 0x400, 0x2}) 00:42:23 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) write$smackfs_labels_list(0xffffffffffffffff, &(0x7f0000000040)={[{'batadv_slave_1\x00'}, {'batadv_slave_1\x00'}, {'batadv_slave_1\x00'}, {'batadv_slave_1\x00'}]}, 0x41) 00:42:23 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) write$6lowpan_control(r5, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) (async) write$6lowpan_control(r5, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) (async) 00:42:23 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 00:42:23 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) (async) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) write$6lowpan_control(r5, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) 00:42:23 executing program 0: socketpair(0x27, 0x5, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000040)={{0xa, 0x4e24, 0x0, @loopback, 0x8}, {0xa, 0x4e21, 0x9, @empty, 0x10001}, 0xffffffffffffffff, {[0x13, 0x7, 0x91b, 0x7, 0x9, 0x10000, 0xfffffc00, 0x100]}}, 0x5c) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) 00:42:23 executing program 5: socket$packet(0x11, 0x0, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x5411, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r3) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000300)={0x2, 0x0, @name="2127a03ada86851d44fe04d7bad3d4e94c3d19a57e33d95d2cfdf499c9e7f385"}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r12, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x250, r4, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x2e, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "261afa03daaefbb2c6ea43a0fac7d6d4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "360475e6c6a982df3c554d3dd6c9de78"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9ff9ed3d2fce9cd2cfe7e26b57e65868"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x70}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xe9c2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4662ebc6c74caf2e0b79c588569a44073eaa2d6a06882c4c3b1afbdd03dff839"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffff801}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x78, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff414f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1981}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e811037625eab64fb4f1ed5f2721b82f93124dbfb2b2260425d3e918036d7772"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dc172e52fbb783ac5f7a7412fc3d4b053f8961d8abc4bb750cea4cd82c95439a"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x32) 00:42:23 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) write$6lowpan_control(r5, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) 00:42:23 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "d7a4d1353801c9f9e0bf29bf6ad29150538a4e8f482973a036b889a767297a10"}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:23 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) write$6lowpan_control(r5, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) 00:42:23 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 00:42:23 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "d7a4d1353801c9f9e0bf29bf6ad29150538a4e8f482973a036b889a767297a10"}) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:23 executing program 5: socket$packet(0x11, 0x0, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x5411, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r3) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000300)={0x2, 0x0, @name="2127a03ada86851d44fe04d7bad3d4e94c3d19a57e33d95d2cfdf499c9e7f385"}) (async, rerun: 64) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r12, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x250, r4, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x2e, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "261afa03daaefbb2c6ea43a0fac7d6d4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "360475e6c6a982df3c554d3dd6c9de78"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9ff9ed3d2fce9cd2cfe7e26b57e65868"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x70}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xe9c2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4662ebc6c74caf2e0b79c588569a44073eaa2d6a06882c4c3b1afbdd03dff839"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffff801}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x78, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff414f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1981}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e811037625eab64fb4f1ed5f2721b82f93124dbfb2b2260425d3e918036d7772"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dc172e52fbb783ac5f7a7412fc3d4b053f8961d8abc4bb750cea4cd82c95439a"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x32) 00:42:23 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1}, &(0x7f00000000c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000180)={0x4c8, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x98, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7fff, 0xc1, 0x8c, 0x4}, {0x8, 0x0, 0x4, 0x3}, {0x100, 0xfa, 0x1c, 0x3f}, {0x7, 0x8b, 0x7, 0x6}]}}}]}}, {{0x8, 0x1, r2}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x1, 0x2, 0xd62}, {0x3, 0x5, 0x3f, 0x101}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff05e4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe55f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff86}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x111}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1b, 0x2, 0x20, 0x200}, {0x4, 0x9, 0x80, 0x1000}, {0x8, 0xa9, 0x79, 0x8}, {0x7, 0xff, 0xfe, 0x1000}]}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x3, 0x1, 0x86bf}, {0x200, 0x8, 0x42}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5c73}}, {0x8}}}]}}]}, 0x4c8}, 0x1, 0x0, 0x0, 0xc060}, 0x10) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:23 executing program 5: socket$packet(0x11, 0x0, 0x300) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x5411, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r3) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r4, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f0000000300)={0x2, 0x0, @name="2127a03ada86851d44fe04d7bad3d4e94c3d19a57e33d95d2cfdf499c9e7f385"}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r12, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000080)={0x250, r4, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x2e, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "261afa03daaefbb2c6ea43a0fac7d6d4"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "360475e6c6a982df3c554d3dd6c9de78"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9ff9ed3d2fce9cd2cfe7e26b57e65868"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x4}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x70}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x0, 0x4, 0x7fffffff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xe9c2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4662ebc6c74caf2e0b79c588569a44073eaa2d6a06882c4c3b1afbdd03dff839"}, @NL802154_KEY_ATTR_ID={0x24, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x9}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffff801}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fff}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x78, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}]}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff414f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1981}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x4c, 0x2e, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "e811037625eab64fb4f1ed5f2721b82f93124dbfb2b2260425d3e918036d7772"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "dc172e52fbb783ac5f7a7412fc3d4b053f8961d8abc4bb750cea4cd82c95439a"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x250}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) openat$damon_rm_contexts(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x32) 00:42:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000000008000000000001f000000000000007b23b3a5a23b19178c287cf3b712d27c84a01ecad6f8723cad4cdad0921aba3cb03c6292c3ddf957d1d591157887880074df8f8060242f68ccea5e8c7ff5d7", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=r4, @ANYBLOB="0c000600000000000000000008000100000000000c000600030000000000000008000b000400000008000b001f000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8004) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/101, 0x65, 0x1, &(0x7f0000000080)=""/84, 0x54}, &(0x7f0000000140)=0x40) 00:42:23 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 00:42:23 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) write$6lowpan_control(r5, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r6) 00:42:23 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x0, "d7a4d1353801c9f9e0bf29bf6ad29150538a4e8f482973a036b889a767297a10"}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:23 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1}, &(0x7f00000000c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000180)={0x4c8, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x98, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7fff, 0xc1, 0x8c, 0x4}, {0x8, 0x0, 0x4, 0x3}, {0x100, 0xfa, 0x1c, 0x3f}, {0x7, 0x8b, 0x7, 0x6}]}}}]}}, {{0x8, 0x1, r2}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x1, 0x2, 0xd62}, {0x3, 0x5, 0x3f, 0x101}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff05e4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe55f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff86}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x111}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1b, 0x2, 0x20, 0x200}, {0x4, 0x9, 0x80, 0x1000}, {0x8, 0xa9, 0x79, 0x8}, {0x7, 0xff, 0xfe, 0x1000}]}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x3, 0x1, 0x86bf}, {0x200, 0x8, 0x42}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5c73}}, {0x8}}}]}}]}, 0x4c8}, 0x1, 0x0, 0x0, 0xc060}, 0x10) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:23 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 00:42:23 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/91, 0x5b, 0x1, &(0x7f0000000ac0)=""/4096, 0x1000}, &(0x7f00000000c0)=0x40) syz_open_dev$video(&(0x7f0000000100), 0xffffffff, 0x40200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:23 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) write$6lowpan_control(r5, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 00:42:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="130025bd7000fbdbdf251e0000000c"], 0xa4}}, 0x0) getitimer(0x1, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000000c0)=0x7fffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 00:42:23 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 00:42:23 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) write$6lowpan_control(r5, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) [ 2543.882829][ T8162] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. 00:42:23 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) (async) 00:42:23 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1}, &(0x7f00000000c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000180)={0x4c8, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x98, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7fff, 0xc1, 0x8c, 0x4}, {0x8, 0x0, 0x4, 0x3}, {0x100, 0xfa, 0x1c, 0x3f}, {0x7, 0x8b, 0x7, 0x6}]}}}]}}, {{0x8, 0x1, r2}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x8, 0x1, 0x2, 0xd62}, {0x3, 0x5, 0x3f, 0x101}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffff05e4}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe55f}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffff86}}}]}}, {{0x8}, {0x90, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x111}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x1b, 0x2, 0x20, 0x200}, {0x4, 0x9, 0x80, 0x1000}, {0x8, 0xa9, 0x79, 0x8}, {0x7, 0xff, 0xfe, 0x1000}]}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x6, 0x3, 0x1, 0x86bf}, {0x200, 0x8, 0x42}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5c73}}, {0x8}}}]}}]}, 0x4c8}, 0x1, 0x0, 0x0, 0xc060}, 0x10) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:23 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/91, 0x5b, 0x1, &(0x7f0000000ac0)=""/4096, 0x1000}, &(0x7f00000000c0)=0x40) (async) syz_open_dev$video(&(0x7f0000000100), 0xffffffff, 0x40200) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:23 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) 00:42:23 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000040)) 00:42:23 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000000008000000000001f000000000000007b23b3a5a23b19178c287cf3b712d27c84a01ecad6f8723cad4cdad0921aba3cb03c6292c3ddf957d1d591157887880074df8f8060242f68ccea5e8c7ff5d7", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=r4, @ANYBLOB="0c000600000000000000000008000100000000000c000600030000000000000008000b000400000008000b001f000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8004) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/101, 0x65, 0x1, &(0x7f0000000080)=""/84, 0x54}, &(0x7f0000000140)=0x40) 00:42:23 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="130025bd7000fbdbdf251e0000000c"], 0xa4}}, 0x0) getitimer(0x1, &(0x7f0000000080)) (async) socket$packet(0x11, 0x2, 0x300) (async) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000000c0)=0x7fffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) [ 2543.963681][ T8169] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. 00:42:23 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000040)) 00:42:23 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 00:42:23 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000040)) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000040)) (async) 00:42:24 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="130025bd7000fbdbdf251e0000000c"], 0xa4}}, 0x0) (async) getitimer(0x1, &(0x7f0000000080)) (async) socket$packet(0x11, 0x2, 0x300) (async) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f00000000c0)=0x7fffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) 00:42:24 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/91, 0x5b, 0x1, &(0x7f0000000ac0)=""/4096, 0x1000}, &(0x7f00000000c0)=0x40) syz_open_dev$video(&(0x7f0000000100), 0xffffffff, 0x40200) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) socket$packet(0x11, 0x3, 0x300) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/91, 0x5b, 0x1, &(0x7f0000000ac0)=""/4096, 0x1000}, &(0x7f00000000c0)=0x40) (async) syz_open_dev$video(&(0x7f0000000100), 0xffffffff, 0x40200) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) 00:42:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="c28e0c70f78b8eb600440000000000808d", @ANYRES32=0x0, @ANYBLOB="d3fbdaaaa3321331110012bb0e8f80b60ebf9a0861269329f11f7ea049feb99457e06a70cef54757527755256baafbc4f6e1c3d34623dbd23e34a3d4966d2927c5556da3bd7e75a0df9c55e81f4715a9ac149a775003803f4f5c87f01b27e2e6570b18701bc2d28beb1410dbe6981e756a87b7181e161f72f9ee5a6cccc89564b60ea78a2185e7fba490cda8ec1087bfaa652a8604377c03055c083c33e0665aae7bd9d0b8ec5a363ffe20cea15cdebe5b8744ceac3bd0517a56033602b946"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x8, 0x7, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x58, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x40}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0xce}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x84}, 0x1, 0x0, 0x0, 0x200080d4}, 0x4000800) socket$packet(0x11, 0x2, 0x300) 00:42:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) [ 2544.086559][ T8197] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. 00:42:24 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair(0x11, 0x1, 0xffffffff, &(0x7f0000000000)) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:24 executing program 0: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r1) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000000008000000000001f000000000000007b23b3a5a23b19178c287cf3b712d27c84a01ecad6f8723cad4cdad0921aba3cb03c6292c3ddf957d1d591157887880074df8f8060242f68ccea5e8c7ff5d7", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=r4, @ANYBLOB="0c000600000000000000000008000100000000000c000600030000000000000008000b000400000008000b001f000000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8004) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000000)=""/101, 0x65, 0x1, &(0x7f0000000080)=""/84, 0x54}, &(0x7f0000000140)=0x40) 00:42:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair(0x11, 0x1, 0xffffffff, &(0x7f0000000000)) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socketpair(0x11, 0x1, 0xffffffff, &(0x7f0000000000)) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) 00:42:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8, 0x1) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:24 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) socketpair(0x11, 0x1, 0xffffffff, &(0x7f0000000000)) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="c28e0c70f78b8eb600440000000000808d", @ANYRES32=0x0, @ANYBLOB="d3fbdaaaa3321331110012bb0e8f80b60ebf9a0861269329f11f7ea049feb99457e06a70cef54757527755256baafbc4f6e1c3d34623dbd23e34a3d4966d2927c5556da3bd7e75a0df9c55e81f4715a9ac149a775003803f4f5c87f01b27e2e6570b18701bc2d28beb1410dbe6981e756a87b7181e161f72f9ee5a6cccc89564b60ea78a2185e7fba490cda8ec1087bfaa652a8604377c03055c083c33e0665aae7bd9d0b8ec5a363ffe20cea15cdebe5b8744ceac3bd0517a56033602b946"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x8, 0x7, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x58, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x40}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0xce}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x84}, 0x1, 0x0, 0x0, 0x200080d4}, 0x4000800) socket$packet(0x11, 0x2, 0x300) 00:42:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x8, {0x7, 0x3, 0x940, 0x7fff}}) 00:42:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x44804) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r3, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7d}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x44804) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:24 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x80) socket$packet(0x11, 0x2, 0x300) 00:42:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x8, {0x7, 0x3, 0x940, 0x7fff}}) 00:42:24 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="c28e0c70f78b8eb600440000000000808d", @ANYRES32=0x0, @ANYBLOB="d3fbdaaaa3321331110012bb0e8f80b60ebf9a0861269329f11f7ea049feb99457e06a70cef54757527755256baafbc4f6e1c3d34623dbd23e34a3d4966d2927c5556da3bd7e75a0df9c55e81f4715a9ac149a775003803f4f5c87f01b27e2e6570b18701bc2d28beb1410dbe6981e756a87b7181e161f72f9ee5a6cccc89564b60ea78a2185e7fba490cda8ec1087bfaa652a8604377c03055c083c33e0665aae7bd9d0b8ec5a363ffe20cea15cdebe5b8744ceac3bd0517a56033602b946"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x8, 0x7, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x58, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x40}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0xce}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x84}, 0x1, 0x0, 0x0, 0x200080d4}, 0x4000800) socket$packet(0x11, 0x2, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="c28e0c70f78b8eb600440000000000808d", @ANYRES32=0x0, @ANYBLOB="d3fbdaaaa3321331110012bb0e8f80b60ebf9a0861269329f11f7ea049feb99457e06a70cef54757527755256baafbc4f6e1c3d34623dbd23e34a3d4966d2927c5556da3bd7e75a0df9c55e81f4715a9ac149a775003803f4f5c87f01b27e2e6570b18701bc2d28beb1410dbe6981e756a87b7181e161f72f9ee5a6cccc89564b60ea78a2185e7fba490cda8ec1087bfaa652a8604377c03055c083c33e0665aae7bd9d0b8ec5a363ffe20cea15cdebe5b8744ceac3bd0517a56033602b946"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x84, r4, 0x8, 0x7, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x58, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x40}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0xce}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x84}, 0x1, 0x0, 0x0, 0x200080d4}, 0x4000800) (async) socket$packet(0x11, 0x2, 0x300) (async) 00:42:24 executing program 4: socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8, 0x1) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:24 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x44804) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r1, 0x1}, 0x14}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa0, r1, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40}, 0x44804) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r3, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) 00:42:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x8, {0x7, 0x3, 0x940, 0x7fff}}) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000000)={0x8, {0x7, 0x3, 0x940, 0x7fff}}) (async) 00:42:24 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:42:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:42:24 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 00:42:24 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8, 0x1) (async) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:42:24 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x80) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x80) socket$packet(0x11, 0x2, 0x300) 00:42:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) 00:42:24 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) 00:42:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x1, 0x11, r3, 0x6) 00:42:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/234, 0xea, 0x0, &(0x7f0000000240)=""/122, 0x7a}, &(0x7f00000002c0)=0x40) r2 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x50, "bdf570801a57bb06631075227ca85690185bd45899c38759f261c77bd8a8a3e1", 0x2, 0x3fb, 0x965, 0x100000, 0x4}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) 00:42:24 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x50, "bdf570801a57bb06631075227ca85690185bd45899c38759f261c77bd8a8a3e1", 0x2, 0x3fb, 0x965, 0x100000, 0x4}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) (async) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:24 executing program 3: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) (async) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x50, "bdf570801a57bb06631075227ca85690185bd45899c38759f261c77bd8a8a3e1", 0x2, 0x3fb, 0x965, 0x100000, 0x4}) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x3, 0x4) (async) r1 = socket$inet(0x2, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) (async) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x1, 0x11, r3, 0x6) 00:42:24 executing program 0: socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r1) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r2, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r2, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x58}, 0x1, 0x0, 0x0, 0xc000}, 0x80) (async) socket$packet(0x11, 0x2, 0x300) 00:42:24 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 00:42:24 executing program 5: socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) setsockopt$MRT6_DONE(0xffffffffffffffff, 0x29, 0xc9, 0x0, 0x0) 00:42:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x3, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x1, 0x11, r3, 0x6) 00:42:24 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x288b01, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/4096, 0x1000, 0x1, &(0x7f0000000340)=""/34, 0x22}, &(0x7f00000003c0)=0x40) r1 = io_uring_setup(0x1980, &(0x7f0000000080)={0x0, 0x7ac5, 0x8, 0x3, 0x170}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00'}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_uring_setup(0x7a98, &(0x7f0000000000)={0x0, 0x7114, 0x400, 0x3, 0x2ae, 0x0, r1}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x54}, 0x40) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) 00:42:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_to_hsr\x00'}}, 0x1e) 00:42:24 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x8, 0x6, 0xf2, 0x10000, 0x5, 0x1ff, 0x2, 0x4, 0x0, 0x8, 0x10001, 0x3, 0x100, 0x8, 0x9, 0x6, 0x7a92, 0x5, 0xfff, 0xf6f, 0xffffffff, 0x4, 0x2, 0x4, 0x3d, 0x41, 0x2ffd, 0x1, 0x7, 0x7, 0x3c19, 0x100]}) 00:42:24 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @empty}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r1) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @initdev, @initdev}, &(0x7f0000000540)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000001180)={0x6dc, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r2}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb38}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3c}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5c34}}}]}}, {{0x8, 0x1, r12}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc36}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}]}}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x40040}, 0x80810) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast1}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c060000", @ANYRES16=0x0, @ANYBLOB="00002abd7000fbdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001006c625f74785f686173685f746f518b6f7274d2240fa0ad24c3d372b270696e67000000000000050003000300", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000024000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400070000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004003f0020030900000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r4, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=0x0, @ANYBLOB="b401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="7800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004007f00000008000100", @ANYRES32=r16, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="900102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="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"], 0x66c}, 0x1, 0x0, 0x0, 0x4040}, 0x11) 00:42:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) 00:42:24 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @empty}, &(0x7f0000000200)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r1) (async) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @initdev, @initdev}, &(0x7f0000000540)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000001180)={0x6dc, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r2}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb38}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3c}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5c34}}}]}}, {{0x8, 0x1, r12}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc36}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}]}}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x40040}, 0x80810) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast1}, &(0x7f00000002c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c060000", @ANYRES16=0x0, @ANYBLOB="00002abd7000fbdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001006c625f74785f686173685f746f518b6f7274d2240fa0ad24c3d372b270696e67000000000000050003000300", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000024000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400070000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004003f0020030900000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r4, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=0x0, @ANYBLOB="b401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="7800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004007f00000008000100", @ANYRES32=r16, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="900102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004002800000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004004cffffff38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040003000000"], 0x66c}, 0x1, 0x0, 0x0, 0x4040}, 0x11) 00:42:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_to_hsr\x00'}}, 0x1e) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_to_hsr\x00'}}, 0x1e) (async) 00:42:24 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x288b01, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/4096, 0x1000, 0x1, &(0x7f0000000340)=""/34, 0x22}, &(0x7f00000003c0)=0x40) (async) r1 = io_uring_setup(0x1980, &(0x7f0000000080)={0x0, 0x7ac5, 0x8, 0x3, 0x170}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00'}) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_uring_setup(0x7a98, &(0x7f0000000000)={0x0, 0x7114, 0x400, 0x3, 0x2ae, 0x0, r1}) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x54}, 0x40) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) 00:42:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) (async) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) 00:42:24 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async, rerun: 32) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x2001, 0x0) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) (async) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @initdev, @empty}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r6, 0x8004562e, 0x0) (async, rerun: 32) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000440), r1) (rerun: 32) getsockname$packet(r1, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000004c0)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000500)={0x0, @initdev, @initdev}, &(0x7f0000000540)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000005c0)={'batadv0\x00', 0x0}) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r6, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000001180)={0x6dc, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r2}, {0x22c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb38}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r10}, {0x198, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x400}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3c}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5c34}}}]}}, {{0x8, 0x1, r12}, {0x1b4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc36}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8a}}}]}}]}, 0x6dc}, 0x1, 0x0, 0x0, 0x40040}, 0x80810) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @multicast1}, &(0x7f00000002c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000380)=0x14) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) (rerun: 64) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000b00)=ANY=[@ANYBLOB="6c060000", @ANYRES16=0x0, @ANYBLOB="00002abd7000fbdbdf250200000008000100", @ANYRES32=r2, @ANYBLOB="7800028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400080000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6c01028040000100240001006c625f74785f686173685f746f518b6f7274d2240fa0ad24c3d372b270696e67000000000000050003000300", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000024000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400070000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004003f0020030900000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r4, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000b00040072616e646f6d000008000100", @ANYRES32=0x0, @ANYBLOB="b401028040000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="7800028038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400080000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004007f00000008000100", @ANYRES32=r16, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="900102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r17, @ANYBLOB="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"], 0x66c}, 0x1, 0x0, 0x0, 0x4040}, 0x11) 00:42:24 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:24 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x288b01, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000d80)=""/4096, 0x1000, 0x1, &(0x7f0000000340)=""/34, 0x22}, &(0x7f00000003c0)=0x40) r1 = io_uring_setup(0x1980, &(0x7f0000000080)={0x0, 0x7ac5, 0x8, 0x3, 0x170}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan4\x00'}) (async, rerun: 64) openat$vimc0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) io_uring_setup(0x7a98, &(0x7f0000000000)={0x0, 0x7114, 0x400, 0x3, 0x2ae, 0x0, r1}) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async, rerun: 64) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r3, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x54}, 0x40) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0xc0905664, 0x0) 00:42:24 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x8, 0x6, 0xf2, 0x10000, 0x5, 0x1ff, 0x2, 0x4, 0x0, 0x8, 0x10001, 0x3, 0x100, 0x8, 0x9, 0x6, 0x7a92, 0x5, 0xfff, 0xf6f, 0xffffffff, 0x4, 0x2, 0x4, 0x3d, 0x41, 0x2ffd, 0x1, 0x7, 0x7, 0x3c19, 0x100]}) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x8, 0x6, 0xf2, 0x10000, 0x5, 0x1ff, 0x2, 0x4, 0x0, 0x8, 0x10001, 0x3, 0x100, 0x8, 0x9, 0x6, 0x7a92, 0x5, 0xfff, 0xf6f, 0xffffffff, 0x4, 0x2, 0x4, 0x3d, 0x41, 0x2ffd, 0x1, 0x7, 0x7, 0x3c19, 0x100]}) (async) 00:42:24 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) 00:42:24 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_to_hsr\x00'}}, 0x1e) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_to_hsr\x00'}}, 0x1e) (async) 00:42:24 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:25 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:25 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:25 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 00:42:25 executing program 4: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x2}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x6, {0x2, 0x8, 0x3ba6, 0x6}, {0x7, 0x20, 0x5}, {0xff, 0x5}}) write$khugepaged_scan(0xffffffffffffffff, &(0x7f00000000c0), 0x8) socket$packet(0x11, 0x2, 0x300) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) socketpair(0x1f, 0x5, 0x81, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000080)=0x4, 0xfffffffffffffc39) 00:42:25 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) read$rfkill(r1, &(0x7f0000000040), 0x8) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) 00:42:25 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004010) 00:42:25 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) 00:42:25 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:25 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$rfkill(r1, &(0x7f0000000040), 0x8) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:25 executing program 5: socket$packet(0x11, 0x2, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004010) 00:42:25 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x8, 0x6, 0xf2, 0x10000, 0x5, 0x1ff, 0x2, 0x4, 0x0, 0x8, 0x10001, 0x3, 0x100, 0x8, 0x9, 0x6, 0x7a92, 0x5, 0xfff, 0xf6f, 0xffffffff, 0x4, 0x2, 0x4, 0x3d, 0x41, 0x2ffd, 0x1, 0x7, 0x7, 0x3c19, 0x100]}) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000040)={0x0, 0x0, '\x00', @raw_data=[0x8, 0x6, 0xf2, 0x10000, 0x5, 0x1ff, 0x2, 0x4, 0x0, 0x8, 0x10001, 0x3, 0x100, 0x8, 0x9, 0x6, 0x7a92, 0x5, 0xfff, 0xf6f, 0xffffffff, 0x4, 0x2, 0x4, 0x3d, 0x41, 0x2ffd, 0x1, 0x7, 0x7, 0x3c19, 0x100]}) (async) 00:42:25 executing program 4: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x2}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x6, {0x2, 0x8, 0x3ba6, 0x6}, {0x7, 0x20, 0x5}, {0xff, 0x5}}) (async) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x6, {0x2, 0x8, 0x3ba6, 0x6}, {0x7, 0x20, 0x5}, {0xff, 0x5}}) write$khugepaged_scan(0xffffffffffffffff, &(0x7f00000000c0), 0x8) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) socketpair(0x1f, 0x5, 0x81, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000080)=0x4, 0xfffffffffffffc39) 00:42:25 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 00:42:25 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 00:42:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 00:42:25 executing program 5: socket$packet(0x11, 0x2, 0x300) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x100, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x4004010) 00:42:25 executing program 4: ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x2}) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x6, {0x2, 0x8, 0x3ba6, 0x6}, {0x7, 0x20, 0x5}, {0xff, 0x5}}) write$khugepaged_scan(0xffffffffffffffff, &(0x7f00000000c0), 0x8) socket$packet(0x11, 0x2, 0x300) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) socketpair(0x1f, 0x5, 0x81, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000080)=0x4, 0xfffffffffffffc39) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x2}) (async) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, &(0x7f0000000100)={0x6, {0x2, 0x8, 0x3ba6, 0x6}, {0x7, 0x20, 0x5}, {0xff, 0x5}}) (async) write$khugepaged_scan(0xffffffffffffffff, &(0x7f00000000c0), 0x8) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x101400, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) (async) socketpair(0x1f, 0x5, 0x81, &(0x7f0000000040)) (async) setsockopt$MRT6_PIM(r2, 0x29, 0xcf, &(0x7f0000000080)=0x4, 0xfffffffffffffc39) (async) 00:42:25 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) 00:42:25 executing program 1: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) 00:42:25 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x0, @sdr={0x30314142, 0x100}}) 00:42:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:25 executing program 1: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) 00:42:25 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x101, 0x2, {0x4, 0x3c15, 0x3ff, 0x3f}}) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) socket$packet(0x11, 0x2, 0x300) 00:42:25 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x0, @sdr={0x30314142, 0x100}}) 00:42:25 executing program 1: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) (async) 00:42:25 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x5, 0xf6e9b, 0x3dcb99}) 00:42:25 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @empty}, &(0x7f0000000140)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @multicast1}, &(0x7f0000000280)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1404", @ANYRES16=r8, @ANYBLOB="00012dbd7000ffdbdf25fb000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x6d0, r0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa7ef}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x95ee}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0xc, 0x40, 0x62}, {0x7f, 0x6, 0xa1, 0x1}, {0x81, 0x4, 0x0, 0xe5a}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x14000003}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x40, 0x5, 0x0, 0x789}, {0x9, 0x40, 0xe4}, {0x100, 0x1, 0x3, 0x8001}, {0x20, 0x61, 0x3f, 0xa5}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x429}}}]}}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x4000}, 0x48041) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r10, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 00:42:25 executing program 5: socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0xa, 0x4e1f, 0x6, @empty, 0x5}, 0x0, {[0x0, 0x3f, 0x0, 0x4, 0x22, 0x4]}}, 0x5c) 00:42:25 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x0, @sdr={0x30314142, 0x100}}) 00:42:25 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @empty}, &(0x7f0000000140)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @multicast1}, &(0x7f0000000280)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1404", @ANYRES16=r8, @ANYBLOB="00012dbd7000ffdbdf25fb000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x6d0, r0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa7ef}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x95ee}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0xc, 0x40, 0x62}, {0x7f, 0x6, 0xa1, 0x1}, {0x81, 0x4, 0x0, 0xe5a}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x14000003}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x40, 0x5, 0x0, 0x789}, {0x9, 0x40, 0xe4}, {0x100, 0x1, 0x3, 0x8001}, {0x20, 0x61, 0x3f, 0xa5}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x429}}}]}}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x4000}, 0x48041) (async) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r10, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) 00:42:25 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x5, 0xf6e9b, 0x3dcb99}) 00:42:25 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x0, 0x100}}) 00:42:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0xa, 0x4e1f, 0x6, @empty, 0x5}, 0x0, {[0x0, 0x3f, 0x0, 0x4, 0x22, 0x4]}}, 0x5c) 00:42:25 executing program 0: socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x101, 0x2, {0x4, 0x3c15, 0x3ff, 0x3f}}) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async) socket$packet(0x11, 0x2, 0x300) 00:42:25 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:25 executing program 3: r0 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000100)={0x0, @private, @empty}, &(0x7f0000000140)=0xc) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) (async, rerun: 64) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @multicast1}, &(0x7f0000000280)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(r7, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1404", @ANYRES16=r8, @ANYBLOB="00012dbd7000ffdbdf25fb000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000ac0)={&(0x7f00000003c0)={0x6d0, r0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r1}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa7ef}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x95ee}}, {0x8}}}]}}, {{0x8}, {0xc8, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1c4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r5}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x8c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x3, 0xc, 0x40, 0x62}, {0x7f, 0x6, 0xa1, 0x1}, {0x81, 0x4, 0x0, 0xe5a}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x26c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x14000003}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x40, 0x5, 0x0, 0x789}, {0x9, 0x40, 0xe4}, {0x100, 0x1, 0x3, 0x8001}, {0x20, 0x61, 0x3f, 0xa5}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x429}}}]}}]}, 0x6d0}, 0x1, 0x0, 0x0, 0x4000}, 0x48041) (async, rerun: 32) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) write$6lowpan_control(r10, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async, rerun: 32) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0) (rerun: 32) 00:42:25 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socket$packet(0x11, 0x2, 0x300) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x5, 0xf6e9b, 0x3dcb99}) 00:42:25 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr}) 00:42:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, {0xa, 0x4e1f, 0x6, @empty, 0x5}, 0x0, {[0x0, 0x3f, 0x0, 0x4, 0x22, 0x4]}}, 0x5c) 00:42:25 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000340)={0x2, @sdr={0x30314142, 0x100}}) 00:42:25 executing program 5: socketpair(0x2c, 0xa, 0x68c0a622, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r1 = socket$packet(0x11, 0x2, 0x300) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x5411, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:42:25 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) 00:42:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f00000000c0)={0xffffffff, "6386fc50ffb183c611670cdf19dd6857f14e51f16b847943c17ba730df3db1f2", 0x10, 0x8, 0x8, 0x8, 0x1}) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1a5, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x0, "8c1cd9738acb7fd8d59d2efbebc0cb0d4228bab458248de19767c62b365146f3", 0x203, 0x3, 0xfffffff9, 0x2, 0x5}) 00:42:25 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000240)={0x1, 0x1, @raw_data=[0x17b, 0x3, 0x1, 0x2, 0xfff, 0xa137, 0x8001, 0x0, 0x2a4, 0x5, 0x5, 0x2, 0x0, 0x1, 0xfffff800, 0x67a]}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xc5, 0x0, 0x7}, 0xc) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x643) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000180)) write$6lowpan_control(r2, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) 00:42:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x1, 0x11, r3, 0x6) 00:42:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f00000000c0)={0xffffffff, "6386fc50ffb183c611670cdf19dd6857f14e51f16b847943c17ba730df3db1f2", 0x10, 0x8, 0x8, 0x8, 0x1}) (async) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1a5, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x0, "8c1cd9738acb7fd8d59d2efbebc0cb0d4228bab458248de19767c62b365146f3", 0x203, 0x3, 0xfffffff9, 0x2, 0x5}) 00:42:25 executing program 5: socketpair(0x2c, 0xa, 0x68c0a622, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r1 = socket$packet(0x11, 0x2, 0x300) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x5411, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) write$6lowpan_control(r2, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:42:25 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) (async) close$fd_v4l2_buffer(0xffffffffffffffff) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000240)={0x1, 0x1, @raw_data=[0x17b, 0x3, 0x1, 0x2, 0xfff, 0xa137, 0x8001, 0x0, 0x2a4, 0x5, 0x5, 0x2, 0x0, 0x1, 0xfffff800, 0x67a]}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xc5, 0x0, 0x7}, 0xc) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xc5, 0x0, 0x7}, 0xc) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x643) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000180)) write$6lowpan_control(r2, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) (async) write$6lowpan_control(r2, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) 00:42:25 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x101, 0x2, {0x4, 0x3c15, 0x3ff, 0x3f}}) (async) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (rerun: 32) 00:42:25 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) 00:42:25 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x1, 0x11, r3, 0x6) 00:42:25 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) 00:42:25 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close$fd_v4l2_buffer(0xffffffffffffffff) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0485661, &(0x7f0000000240)={0x1, 0x1, @raw_data=[0x17b, 0x3, 0x1, 0x2, 0xfff, 0xa137, 0x8001, 0x0, 0x2a4, 0x5, 0x5, 0x2, 0x0, 0x1, 0xfffff800, 0x67a]}) (async) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000140)={0x0, 0x1, 0xc5, 0x0, 0x7}, 0xc) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x643) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) getrusage(0xffffffffffffffff, &(0x7f0000000180)) write$6lowpan_control(r2, &(0x7f0000000100)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) 00:42:25 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f00000000c0)={0xffffffff, "6386fc50ffb183c611670cdf19dd6857f14e51f16b847943c17ba730df3db1f2", 0x10, 0x8, 0x8, 0x8, 0x1}) (async) r2 = syz_open_dev$video(&(0x7f0000000000), 0x1a5, 0x0) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000040)={0x0, "8c1cd9738acb7fd8d59d2efbebc0cb0d4228bab458248de19767c62b365146f3", 0x203, 0x3, 0xfffffff9, 0x2, 0x5}) 00:42:25 executing program 5: socketpair(0x2c, 0xa, 0x68c0a622, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x5411, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x5411, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:42:26 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_getres(0x6, &(0x7f0000000000)) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:26 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0xaf5) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x2, 0x1, @stop_pts=0x7}) socket$packet(0x11, 0x1, 0x300) 00:42:26 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:26 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x1, 0x11, r3, 0x6) 00:42:27 executing program 5: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:27 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_getres(0x6, &(0x7f0000000000)) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:27 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0xaf5) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x2, 0x1, @stop_pts=0x7}) (async) socket$packet(0x11, 0x1, 0x300) 00:42:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:27 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x208, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)={r2}) 00:42:27 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) 00:42:27 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_getres(0x6, &(0x7f0000000000)) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:27 executing program 5: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:27 executing program 3: write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) prctl$PR_GET_SECUREBITS(0x1b) 00:42:27 executing program 5: r0 = socket$packet(0x11, 0x1, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:27 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0xaf5) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f00000000c0)={0x2, 0x1, @stop_pts=0x7}) (async) socket$packet(0x11, 0x1, 0x300) 00:42:27 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) 00:42:27 executing program 3: write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) prctl$PR_GET_SECUREBITS(0x1b) 00:42:27 executing program 5: setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000040), 0x4) socket$packet(0x11, 0x2, 0x300) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2}) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:27 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) socketpair(0x9, 0x6, 0x100, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000040)=0x5533e09a, 0x4) 00:42:27 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x208, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)={r2}) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b) (async) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) (async) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x208, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)={r2}) (async) 00:42:27 executing program 3: write$6lowpan_control(0xffffffffffffffff, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) prctl$PR_GET_SECUREBITS(0x1b) 00:42:27 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 00:42:27 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) socketpair(0x9, 0x6, 0x100, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000040)=0x5533e09a, 0x4) 00:42:27 executing program 5: setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000040), 0x4) socket$packet(0x11, 0x2, 0x300) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2}) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2}) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) 00:42:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x2, 0x300) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) 00:42:27 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x3, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:27 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 00:42:27 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) (async) openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) 00:42:27 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) socketpair(0x9, 0x6, 0x100, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000040)=0x5533e09a, 0x4) 00:42:27 executing program 2: socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:42:27 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:27 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, 0x0, 0x208, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3ff}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)={r2}) 00:42:27 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x20001, 0x0, 0x5, 0x2e6f2d, 0x69cbc}) 00:42:27 executing program 5: setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2}) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:27 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x20}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x5) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x10) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:27 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x208001) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x1, {0xffff, 0x10000, 0x101, 0x6}}) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) 00:42:27 executing program 2: socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:42:27 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x20001, 0x0, 0x5, 0x2e6f2d, 0x69cbc}) 00:42:27 executing program 5: socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x800, 0x8) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0x5411, 0x0) 00:42:28 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000040)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x20001, 0x0, 0x5, 0x2e6f2d, 0x69cbc}) 00:42:28 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x20}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x5) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x10) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:28 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x208001) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x1, {0xffff, 0x10000, 0x101, 0x6}}) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) 00:42:28 executing program 2: socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x3, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:42:28 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x1, "da3fd7cd95e5ebc6a021d091326fe7eb93f86b46a6b908d2f22104791cf2ade0"}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x2) socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) 00:42:28 executing program 3: userfaultfd(0x801) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 00:42:28 executing program 5: socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x800, 0x8) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 32) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0x5411, 0x0) 00:42:28 executing program 2: socket$packet(0x11, 0x2, 0x300) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:42:28 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) (rerun: 64) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x20}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x5) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x10) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:28 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x5, 0x208001) ioctl$VIDIOC_SUBDEV_S_SELECTION(r0, 0xc040563e, &(0x7f0000000040)={0x1, 0x0, 0x2, 0x1, {0xffff, 0x10000, 0x101, 0x6}}) (async) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, 0x0) 00:42:28 executing program 3: userfaultfd(0x801) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 00:42:28 executing program 3: userfaultfd(0x801) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f00000001c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000100)={0x20, 0x0, 0x1, 0x0, &(0x7f0000000040)=[{}]}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) 00:42:28 executing program 2: openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:42:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) 00:42:28 executing program 2: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:42:28 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x1, "da3fd7cd95e5ebc6a021d091326fe7eb93f86b46a6b908d2f22104791cf2ade0"}) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x2) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) 00:42:28 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) 00:42:28 executing program 5: socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x800, 0x8) (async) socket$inet(0x2, 0x800, 0x8) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) (async) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0x5411, 0x0) 00:42:28 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x1, 0x1, @stop_pts=0x3}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x20010, r2, 0xa07e1000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x2000, 0x1}) 00:42:28 executing program 2: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:42:28 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:28 executing program 2: openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) 00:42:28 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async, rerun: 32) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x1, 0x1, @stop_pts=0x3}) (async, rerun: 32) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x20010, r2, 0xa07e1000) (async, rerun: 32) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x2000, 0x1}) (rerun: 32) 00:42:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) 00:42:28 executing program 4: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:28 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000d40)={'wpan0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), r2) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x20, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x8084) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000d40)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r3, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x20}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x5) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x81}, 0x10) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:28 executing program 5: add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="2065ac412f8465e5b009f1", 0xb, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f00000000c0)={0x4, "80860b041c6932b53bb3fa9a9ff180a18852644a43082c4360a0ea9efd0db36e", 0x4, 0x9, 0x5, 0x2, 0x3}) 00:42:28 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x20, 0xfffffff9, 0x8, 0x4}) r1 = syz_open_dev$video(&(0x7f0000000040), 0x200, 0x40001) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x3, "23fa0dcc243860f0225d85c1db84ff59c747784e9fd8973992689aff36aa49ad", 0x2, 0xbec8, 0x69e8, 0x10000, 0x4}) 00:42:28 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0485661, &(0x7f0000000100)={0x1, 0x1, @stop_pts=0x3}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xc, 0x20010, r2, 0xa07e1000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x2000, 0x1}) (async) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x2000, 0x1}) 00:42:28 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x1, "da3fd7cd95e5ebc6a021d091326fe7eb93f86b46a6b908d2f22104791cf2ade0"}) (async) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x2) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) (async) socket$packet(0x11, 0x2, 0x300) 00:42:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/33, 0x21, 0x1, &(0x7f0000000080)=""/11, 0xb}, &(0x7f0000000100)=0x40) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:28 executing program 2: socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x3, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 00:42:28 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c884}, 0xc080) 00:42:28 executing program 5: add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="2065ac412f8465e5b009f1", 0xb, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f00000000c0)={0x4, "80860b041c6932b53bb3fa9a9ff180a18852644a43082c4360a0ea9efd0db36e", 0x4, 0x9, 0x5, 0x2, 0x3}) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="2065ac412f8465e5b009f1", 0xb, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (async) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f00000000c0)={0x4, "80860b041c6932b53bb3fa9a9ff180a18852644a43082c4360a0ea9efd0db36e", 0x4, 0x9, 0x5, 0x2, 0x3}) (async) 00:42:28 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async, rerun: 64) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x20, 0xfffffff9, 0x8, 0x4}) (async, rerun: 64) r1 = syz_open_dev$video(&(0x7f0000000040), 0x200, 0x40001) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x3, "23fa0dcc243860f0225d85c1db84ff59c747784e9fd8973992689aff36aa49ad", 0x2, 0xbec8, 0x69e8, 0x10000, 0x4}) 00:42:28 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) (async, rerun: 64) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async, rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c884}, 0xc080) 00:42:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/33, 0x21, 0x1, &(0x7f0000000080)=""/11, 0xb}, &(0x7f0000000100)=0x40) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x2, 0x300) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/33, 0x21, 0x1, &(0x7f0000000080)=""/11, 0xb}, &(0x7f0000000100)=0x40) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) 00:42:28 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet(0x2, 0x3, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_TP_METER(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x100}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x40040000}, 0x4040045) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) 00:42:28 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) (async, rerun: 64) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x800}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c884}, 0xc080) 00:42:28 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000000)={0x0, 0x4, 0x0, 0x20, 0xfffffff9, 0x8, 0x4}) (async) r1 = syz_open_dev$video(&(0x7f0000000040), 0x200, 0x40001) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000080)={0x3, "23fa0dcc243860f0225d85c1db84ff59c747784e9fd8973992689aff36aa49ad", 0x2, 0xbec8, 0x69e8, 0x10000, 0x4}) 00:42:28 executing program 5: add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="2065ac412f8465e5b009f1", 0xb, 0x0) (async) add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="2065ac412f8465e5b009f1", 0xb, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) (async) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0xb101, 0x0) ioctl$VIDIOC_G_MODULATOR(0xffffffffffffffff, 0xc0445636, &(0x7f00000000c0)={0x4, "80860b041c6932b53bb3fa9a9ff180a18852644a43082c4360a0ea9efd0db36e", 0x4, 0x9, 0x5, 0x2, 0x3}) 00:42:28 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x1, "bce23e334a193487c59b1010e96ada6dd447c36b979b3d9ff2eb820ab0dc1fd9"}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x270000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x7fff, "ac4e734bd32f93bd407a9c1ad1b4796598d803813cbe2233ae53b86ff752d88e"}) socket$packet(0x11, 0x2, 0x300) 00:42:28 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x50, "bdf570801a57bb06631075227ca85690185bd45899c38759f261c77bd8a8a3e1", 0x2, 0x3fb, 0x965, 0x100000, 0x4}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:28 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0xfffffffffffffcc4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/33, 0x21, 0x1, &(0x7f0000000080)=""/11, 0xb}, &(0x7f0000000100)=0x40) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:28 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}}, 0xc0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8011, 0xffffffffffffffff, 0x8000000) 00:42:28 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) io_uring_setup(0x4e7c, &(0x7f0000000180)={0x0, 0x5402, 0x4, 0x3, 0x257}) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) socketpair(0x22, 0x80000, 0x80, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x10000, @private2, 0x3}, {0xa, 0x4e20, 0x2, @mcast2, 0x5ea2}, 0x1, {[0xffff, 0x6, 0x8, 0x1f, 0xfff, 0x100, 0x4, 0xef8]}}, 0x5c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r7, 0x8004562e, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f00000000c0)={0x18}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000100)={0x0, {0x0, 0xff, 0x3ff, 0x7fff}, {0x9b6, 0xffffffff, 0x101, 0x2}, {0x10000, 0x7}}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r8, 0x8004562e, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r8) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000200)={0x0, @reserved}) 00:42:28 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x50, "bdf570801a57bb06631075227ca85690185bd45899c38759f261c77bd8a8a3e1", 0x2, 0x3fb, 0x965, 0x100000, 0x4}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:28 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}}, 0xc0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8011, 0xffffffffffffffff, 0x8000000) 00:42:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 00:42:28 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0xfffffffffffffcc4) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:28 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x50, "bdf570801a57bb06631075227ca85690185bd45899c38759f261c77bd8a8a3e1", 0x2, 0x3fb, 0x965, 0x100000, 0x4}) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:28 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}}, 0xc0) (async) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x8011, 0xffffffffffffffff, 0x8000000) 00:42:28 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x1, "bce23e334a193487c59b1010e96ada6dd447c36b979b3d9ff2eb820ab0dc1fd9"}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x270000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x7fff, "ac4e734bd32f93bd407a9c1ad1b4796598d803813cbe2233ae53b86ff752d88e"}) socket$packet(0x11, 0x2, 0x300) 00:42:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 00:42:28 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x50, "bdf570801a57bb06631075227ca85690185bd45899c38759f261c77bd8a8a3e1", 0x2, 0x3fb, 0x965, 0x100000, 0x4}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, &(0x7f0000000040)) 00:42:28 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) io_uring_setup(0x4e7c, &(0x7f0000000180)={0x0, 0x5402, 0x4, 0x3, 0x257}) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) socketpair(0x22, 0x80000, 0x80, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x10000, @private2, 0x3}, {0xa, 0x4e20, 0x2, @mcast2, 0x5ea2}, 0x1, {[0xffff, 0x6, 0x8, 0x1f, 0xfff, 0x100, 0x4, 0xef8]}}, 0x5c) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r7, 0x8004562e, 0x0) (async, rerun: 32) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f00000000c0)={0x18}) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000100)={0x0, {0x0, 0xff, 0x3ff, 0x7fff}, {0x9b6, 0xffffffff, 0x101, 0x2}, {0x10000, 0x7}}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r8, 0x8004562e, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000140), r8) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000200)={0x0, @reserved}) 00:42:28 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0xfffffffffffffcc4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:29 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x50, "bdf570801a57bb06631075227ca85690185bd45899c38759f261c77bd8a8a3e1", 0x2, 0x3fb, 0x965, 0x100000, 0x4}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 00:42:29 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x107000, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000180)={0x7, 0x1, 0xebc, 0x800, 0x7f, 0xef, 0x8}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 00:42:29 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x50, "bdf570801a57bb06631075227ca85690185bd45899c38759f261c77bd8a8a3e1", 0x2, 0x3fb, 0x965, 0x100000, 0x4}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 00:42:29 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x107000, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000180)={0x7, 0x1, 0xebc, 0x800, 0x7f, 0xef, 0x8}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) 00:42:29 executing program 4: setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:29 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 00:42:29 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f0000000100)={0x50, "bdf570801a57bb06631075227ca85690185bd45899c38759f261c77bd8a8a3e1", 0x2, 0x3fb, 0x965, 0x100000, 0x4}) 00:42:29 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x107000, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000180)={0x7, 0x1, 0xebc, 0x800, 0x7f, 0xef, 0x8}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x107000, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0405665, &(0x7f0000000180)={0x7, 0x1, 0xebc, 0x800, 0x7f, 0xef, 0x8}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x38}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) write$6lowpan_control(r1, &(0x7f0000000140)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async) 00:42:29 executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x1, "bce23e334a193487c59b1010e96ada6dd447c36b979b3d9ff2eb820ab0dc1fd9"}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x270000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x7fff, "ac4e734bd32f93bd407a9c1ad1b4796598d803813cbe2233ae53b86ff752d88e"}) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x1, "bce23e334a193487c59b1010e96ada6dd447c36b979b3d9ff2eb820ab0dc1fd9"}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x270000, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x7fff, "ac4e734bd32f93bd407a9c1ad1b4796598d803813cbe2233ae53b86ff752d88e"}) (async) socket$packet(0x11, 0x2, 0x300) (async) 00:42:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) io_uring_setup(0x4e7c, &(0x7f0000000180)={0x0, 0x5402, 0x4, 0x3, 0x257}) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) socketpair(0x22, 0x80000, 0x80, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e21, 0x10000, @private2, 0x3}, {0xa, 0x4e20, 0x2, @mcast2, 0x5ea2}, 0x1, {[0xffff, 0x6, 0x8, 0x1f, 0xfff, 0x100, 0x4, 0xef8]}}, 0x5c) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x28}}, 0x0) (async, rerun: 64) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_G_OUTPUT(r7, 0x8004562e, 0x0) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r7, 0x3b86, &(0x7f00000000c0)={0x18}) (async, rerun: 64) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (rerun: 64) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000100)={0x0, {0x0, 0xff, 0x3ff, 0x7fff}, {0x9b6, 0xffffffff, 0x101, 0x2}, {0x10000, 0x7}}) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r8, 0x8004562e, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000140), r8) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000200)={0x0, @reserved}) 00:42:29 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:29 executing program 4: setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) 00:42:29 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000100)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)={0x4c4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2441}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1f, 0x93, 0x80000001}, {0x80, 0x10, 0x8, 0x3}, {0x5, 0x20, 0xde}, {0x1, 0x3, 0xff}, {0x33, 0x81, 0x70, 0x7ff}, {0x2, 0xc0, 0x3, 0x2}, {0x1, 0x7, 0x80, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9f56}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7db, 0x63, 0x1, 0x7fff}, {0x4, 0xc7, 0x7, 0x5}, {0x3f, 0x6, 0x0, 0x800}, {0x401, 0x5, 0x59, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4001) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x800c0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/195, 0xc3, 0x0, &(0x7f0000000100)=""/227, 0xe3}, &(0x7f0000000040)=0x40) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000340)={0xc, {0xc4, 0x10000, 0xffff, 0x6}, {0x1, 0x2, 0x8, 0x3}, {0xaa7a, 0x100}}) write$6lowpan_control(r2, &(0x7f0000000380)='connect aa:aa:aa:aa:aa:10 2', 0x1b) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000200)={0x9, "b96db065e14e1aad18fa9ca93b8d884a520ea40969c8cfc97497c8f300b4ff0e", 0x2, 0x7, 0x400, 0xffffff, 0x2}) 00:42:29 executing program 2: ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x800c0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/195, 0xc3, 0x0, &(0x7f0000000100)=""/227, 0xe3}, &(0x7f0000000040)=0x40) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000340)={0xc, {0xc4, 0x10000, 0xffff, 0x6}, {0x1, 0x2, 0x8, 0x3}, {0xaa7a, 0x100}}) write$6lowpan_control(r2, &(0x7f0000000380)='connect aa:aa:aa:aa:aa:10 2', 0x1b) (async) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000200)={0x9, "b96db065e14e1aad18fa9ca93b8d884a520ea40969c8cfc97497c8f300b4ff0e", 0x2, 0x7, 0x400, 0xffffff, 0x2}) 00:42:29 executing program 2: ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:29 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000100)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)={0x4c4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2441}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1f, 0x93, 0x80000001}, {0x80, 0x10, 0x8, 0x3}, {0x5, 0x20, 0xde}, {0x1, 0x3, 0xff}, {0x33, 0x81, 0x70, 0x7ff}, {0x2, 0xc0, 0x3, 0x2}, {0x1, 0x7, 0x80, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9f56}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7db, 0x63, 0x1, 0x7fff}, {0x4, 0xc7, 0x7, 0x5}, {0x3f, 0x6, 0x0, 0x800}, {0x401, 0x5, 0x59, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4001) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0x3, 0x1, @start={0xfffffff7, 0x1}}) 00:42:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300), 0x800c0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000003c0)={&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/195, 0xc3, 0x0, &(0x7f0000000100)=""/227, 0xe3}, &(0x7f0000000040)=0x40) (async) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000340)={0xc, {0xc4, 0x10000, 0xffff, 0x6}, {0x1, 0x2, 0x8, 0x3}, {0xaa7a, 0x100}}) write$6lowpan_control(r2, &(0x7f0000000380)='connect aa:aa:aa:aa:aa:10 2', 0x1b) (async) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000200)={0x9, "b96db065e14e1aad18fa9ca93b8d884a520ea40969c8cfc97497c8f300b4ff0e", 0x2, 0x7, 0x400, 0xffffff, 0x2}) 00:42:29 executing program 4: setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:29 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2, {0x1, 0x2000, 0x9, 0x7}}) write$6lowpan_control(r0, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000640)=0x14) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000800)) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="34040000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060001000000010000000c0006000300000003000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008800}, 0x4004010) 00:42:29 executing program 2: ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0x3, 0x1, @start={0xfffffff7, 0x1}}) 00:42:29 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0xc044) 00:42:29 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000100)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)={0x4c4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2441}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1f, 0x93, 0x80000001}, {0x80, 0x10, 0x8, 0x3}, {0x5, 0x20, 0xde}, {0x1, 0x3, 0xff}, {0x33, 0x81, 0x70, 0x7ff}, {0x2, 0xc0, 0x3, 0x2}, {0x1, 0x7, 0x80, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9f56}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7db, 0x63, 0x1, 0x7fff}, {0x4, 0xc7, 0x7, 0x5}, {0x3f, 0x6, 0x0, 0x800}, {0x401, 0x5, 0x59, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4001) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x2, 0x300) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) (async) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000100)=0xc) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)={0x4c4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2441}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1f, 0x93, 0x80000001}, {0x80, 0x10, 0x8, 0x3}, {0x5, 0x20, 0xde}, {0x1, 0x3, 0xff}, {0x33, 0x81, 0x70, 0x7ff}, {0x2, 0xc0, 0x3, 0x2}, {0x1, 0x7, 0x80, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9f56}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7db, 0x63, 0x1, 0x7fff}, {0x4, 0xc7, 0x7, 0x5}, {0x3f, 0x6, 0x0, 0x800}, {0x401, 0x5, 0x59, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4001) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) 00:42:29 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2, {0x1, 0x2000, 0x9, 0x7}}) write$6lowpan_control(r0, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000640)=0x14) (async) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000800)) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="34040000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060001000000010000000c0006000300000003000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008800}, 0x4004010) 00:42:29 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0xc044) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0xc044) 00:42:29 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000000)={0x3, 0x1, @start={0xfffffff7, 0x1}}) 00:42:29 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140a, 0x8, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x11) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 00:42:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x2, {0x1, 0x2000, 0x9, 0x7}}) write$6lowpan_control(r0, &(0x7f00000006c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000640)=0x14) ioctl$VIDIOC_G_OUTPUT(0xffffffffffffffff, 0x8004562e, &(0x7f0000000800)) (async) sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="34040000", @ANYRES16=0x0, @ANYBLOB="000127bd7000fddbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060001000000010000000c0006000300000003000000"], 0x34}, 0x1, 0x0, 0x0, 0x4008800}, 0x4004010) 00:42:29 executing program 0: socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:29 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async, rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4818}, 0xc044) (rerun: 32) 00:42:29 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:29 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x40880) 00:42:29 executing program 5: socket$packet(0x11, 0x3, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x7, {0x2f, 0xa5, 0x7}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x7, "89ff881875b281419ae060a4532afb7ede6c5f8e3db02bac1e4ac1360a82639d", 0x400, 0x200, 0x1, 0x8, 0x4}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000e14010029bd7000fcdb010000000800030003000000"], 0x20}}, 0x20000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/62, 0x3e, 0x1, &(0x7f00000001c0)=""/98, 0x62}, &(0x7f0000000280)=0x40) 00:42:29 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140a, 0x8, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x11) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 00:42:29 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:29 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x40880) 00:42:29 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x40880) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x40880) 00:42:29 executing program 5: socket$packet(0x11, 0x3, 0x300) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x7, {0x2f, 0xa5, 0x7}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async, rerun: 64) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x7, "89ff881875b281419ae060a4532afb7ede6c5f8e3db02bac1e4ac1360a82639d", 0x400, 0x200, 0x1, 0x8, 0x4}) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000e14010029bd7000fcdb010000000800030003000000"], 0x20}}, 0x20000000) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/62, 0x3e, 0x1, &(0x7f00000001c0)=""/98, 0x62}, &(0x7f0000000280)=0x40) 00:42:29 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:29 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000000)) 00:42:29 executing program 2: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:29 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x140a, 0x8, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x11) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r2, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 00:42:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x1, @loopback, 0x4}, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}, 0x401}, 0x0, {[0x8001, 0x4, 0x6, 0x1, 0x68c4, 0x0, 0x3, 0xaa1]}}, 0x5c) 00:42:29 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000000)) (async) 00:42:29 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) 00:42:29 executing program 5: socket$packet(0x11, 0x3, 0x300) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_SELECTION(r1, 0xc040563e, &(0x7f00000002c0)={0x0, 0x0, 0x3, 0x7, {0x2f, 0xa5, 0x7}}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000100)={0x7, "89ff881875b281419ae060a4532afb7ede6c5f8e3db02bac1e4ac1360a82639d", 0x400, 0x200, 0x1, 0x8, 0x4}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000000e14010029bd7000fcdb010000000800030003000000"], 0x20}}, 0x20000000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000240)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/62, 0x3e, 0x1, &(0x7f00000001c0)=""/98, 0x62}, &(0x7f0000000280)=0x40) 00:42:29 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, 0x0) 00:42:29 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x1, @loopback, 0x4}, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}, 0x401}, 0x0, {[0x8001, 0x4, 0x6, 0x1, 0x68c4, 0x0, 0x3, 0xaa1]}}, 0x5c) 00:42:29 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, 0x0) 00:42:29 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x60980) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x1, @loopback, 0x4}, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}, 0x401}, 0x0, {[0x8001, 0x4, 0x6, 0x1, 0x68c4, 0x0, 0x3, 0xaa1]}}, 0x5c) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e21, 0x1, @loopback, 0x4}, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x37}, 0x401}, 0x0, {[0x8001, 0x4, 0x6, 0x1, 0x68c4, 0x0, 0x3, 0xaa1]}}, 0x5c) (async) 00:42:29 executing program 1: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) 00:42:29 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, 0x0) 00:42:29 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000000)) 00:42:29 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x0, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:29 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000000)={0x3, {0x7fffffff, 0x48, 0x0, 0xfffffffa}}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:30 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000000)={0x8}) socket$packet(0x11, 0x2, 0x300) 00:42:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x0, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:30 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x60980) (async) unshare(0x60980) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:30 executing program 1: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) (async) 00:42:30 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000000)={0x3, {0x7fffffff, 0x48, 0x0, 0xfffffffa}}) (async) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000000)={0x3, {0x7fffffff, 0x48, 0x0, 0xfffffffa}}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:30 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x0, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff, 0x7]}) 00:42:30 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000000)={0x3, {0x7fffffff, 0x48, 0x0, 0xfffffffa}}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$VIDIOC_S_CROP(0xffffffffffffffff, 0x4014563c, &(0x7f0000000000)={0x3, {0x7fffffff, 0x48, 0x0, 0xfffffffa}}) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) 00:42:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe, 0xffff]}) 00:42:30 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) unshare(0x60980) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:30 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:30 executing program 1: socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, 0x0) (async) 00:42:30 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000000)={0x8}) (async) socket$packet(0x11, 0x2, 0x300) 00:42:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000, 0x7ffffffe]}) 00:42:30 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000040)={0x20, r1, 0x6, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) 00:42:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:30 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff, 0x8000]}) 00:42:30 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000040)={0x20, r1, 0x6, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) 00:42:30 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f0000000040)={0x20, r1, 0x6, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) 00:42:30 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000, 0x1ff]}) 00:42:30 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:33 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) 00:42:33 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x19db, &(0x7f0000000240)={0x0, 0x99f7, 0x40, 0x2, 0xd0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) io_uring_setup(0x5265, &(0x7f00000003c0)={0x0, 0xecb5, 0x80, 0x0, 0x3f, 0x0, r2}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd7000fbdbdf250400000008003c000053000008003900040000000800220066000000050033000200360003000008080041000600000008003200ff07000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 00:42:33 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000000)={0x8}) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) 00:42:33 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) socket$packet(0x11, 0x2, 0x300) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) 00:42:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4, 0x1000]}) 00:42:33 executing program 5: socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9, 0x8b4]}) 00:42:33 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x19db, &(0x7f0000000240)={0x0, 0x99f7, 0x40, 0x2, 0xd0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300)) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) io_uring_setup(0x5265, &(0x7f00000003c0)={0x0, 0xecb5, 0x80, 0x0, 0x3f, 0x0, r2}) (async) io_uring_setup(0x5265, &(0x7f00000003c0)={0x0, 0xecb5, 0x80, 0x0, 0x3f, 0x0, r2}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd7000fbdbdf250400000008003c000053000008003900040000000800220066000000050033000200360003000008080041000600000008003200ff07000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 00:42:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000, 0x9]}) 00:42:33 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000040)={0x2, "2d95569b31bb92e4a92c0b84f1c128bf72ff136183d90bae9975f7e8bd88a406", 0x1, 0x80, 0x2c3, 0x3000000, 0x2}) 00:42:33 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x19db, &(0x7f0000000240)={0x0, 0x99f7, 0x40, 0x2, 0xd0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300)) (async) syz_io_uring_setup(0x19db, &(0x7f0000000240)={0x0, 0x99f7, 0x40, 0x2, 0xd0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) io_uring_setup(0x5265, &(0x7f00000003c0)={0x0, 0xecb5, 0x80, 0x0, 0x3f, 0x0, r2}) (async) io_uring_setup(0x5265, &(0x7f00000003c0)={0x0, 0xecb5, 0x80, 0x0, 0x3f, 0x0, r2}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd7000fbdbdf250400000008003c000053000008003900040000000800220066000000050033000200360003000008080041000600000008003200ff07000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 00:42:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35, 0x8000]}) 00:42:33 executing program 4: socket$packet(0x11, 0x2, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) 00:42:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100, 0x6f74ff35]}) 00:42:33 executing program 1: socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:33 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000040)={0x2, "2d95569b31bb92e4a92c0b84f1c128bf72ff136183d90bae9975f7e8bd88a406", 0x1, 0x80, 0x2c3, 0x3000000, 0x2}) 00:42:33 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x8000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r4, 0x2, &(0x7f0000000000)=0x7) 00:42:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) socket$packet(0x11, 0x2, 0x300) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x262}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 00:42:33 executing program 4: socket$packet(0x11, 0x2, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) (async) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) 00:42:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2, 0x100]}) 00:42:33 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x8000) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) ioctl$RFKILL_IOC_MAX_SIZE(r4, 0x2, &(0x7f0000000000)=0x7) 00:42:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x20010, r0, 0x9617e000) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x8, @sdr={0x31384142, 0x7f}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000140)={0x8, 0x8, 0x4, 0x2000, 0x10, {}, {0x1, 0x0, 0x14, 0x40, 0x7f, 0x6, "b35cdd8a"}, 0x7ff, 0x4, {}, 0x20, 0x0, r2}) 00:42:33 executing program 4: socket$packet(0x11, 0x2, 0x300) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) (async) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) (async) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) 00:42:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1, 0x2]}) 00:42:33 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000040)={0x2, "2d95569b31bb92e4a92c0b84f1c128bf72ff136183d90bae9975f7e8bd88a406", 0x1, 0x80, 0x2c3, 0x3000000, 0x2}) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$VIDIOC_ENUMOUTPUT(r1, 0xc0485630, &(0x7f0000000040)={0x2, "2d95569b31bb92e4a92c0b84f1c128bf72ff136183d90bae9975f7e8bd88a406", 0x1, 0x80, 0x2c3, 0x3000000, 0x2}) (async) 00:42:33 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r2, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r3, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8000}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x8000) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) (async) ioctl$RFKILL_IOC_MAX_SIZE(r4, 0x2, &(0x7f0000000000)=0x7) 00:42:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) (async) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x262}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 00:42:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83, 0x1]}) 00:42:33 executing program 3: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x32c13000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x20010, r0, 0x9617e000) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x8, @sdr={0x31384142, 0x7f}}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000140)={0x8, 0x8, 0x4, 0x2000, 0x10, {}, {0x1, 0x0, 0x14, 0x40, 0x7f, 0x6, "b35cdd8a"}, 0x7ff, 0x4, {}, 0x20, 0x0, r2}) 00:42:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x200008c0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) 00:42:33 executing program 3: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x32c13000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1, 0x83]}) 00:42:33 executing program 5: socket$packet(0x11, 0x2, 0x300) 00:42:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8, 0x1]}) 00:42:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x200008c0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) 00:42:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000002, 0x20010, r0, 0x9617e000) (async) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f0000000000)={0x8, @sdr={0x31384142, 0x7f}}) (async) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f0000000140)={0x8, 0x8, 0x4, 0x2000, 0x10, {}, {0x1, 0x0, 0x14, 0x40, 0x7f, 0x6, "b35cdd8a"}, 0x7ff, 0x4, {}, 0x20, 0x0, r2}) 00:42:33 executing program 3: r0 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x10, r0, 0x32c13000) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:33 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (rerun: 64) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x262}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) 00:42:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data=[0x8]}) 00:42:33 executing program 5: socket$packet(0x11, 0x2, 0x300) 00:42:33 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r2, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private}, &(0x7f0000000100)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c041}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x218, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1fc, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x5cd3, 0x4, 0xa2, 0xffffffff}, {0x100, 0x9, 0x0, 0x3ff}, {0x8, 0x5, 0x0, 0x10001}, {0x3, 0x80, 0x4, 0x3}, {0x5, 0x8, 0x2, 0x10001}, {0x9, 0x4, 0x7e, 0xfffffffb}, {0x0, 0xff, 0x8, 0x8}, {0x8, 0x1f, 0x8, 0x200}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x100, 0x81, 0x33, 0x4}, {0xbda, 0x7f, 0x0, 0x7f}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x57}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) 00:42:33 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x200008c0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x3, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4048041}, 0x200008c0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) (async) 00:42:33 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_io_uring_setup(0x19db, &(0x7f0000000240)={0x0, 0x99f7, 0x40, 0x2, 0xd0, 0x0, r1}, &(0x7f00000002c0), &(0x7f0000000300)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) io_uring_setup(0x5265, &(0x7f00000003c0)={0x0, 0xecb5, 0x80, 0x0, 0x3f, 0x0, r2}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000428bd7000fbdbdf250400000008003c000053000008003900040000000800220066000000050033000200360003000008080041000600000008003200ff07000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) 00:42:33 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private}, &(0x7f0000000100)=0xc) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c041}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x218, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1fc, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x5cd3, 0x4, 0xa2, 0xffffffff}, {0x100, 0x9, 0x0, 0x3ff}, {0x8, 0x5, 0x0, 0x10001}, {0x3, 0x80, 0x4, 0x3}, {0x5, 0x8, 0x2, 0x10001}, {0x9, 0x4, 0x7e, 0xfffffffb}, {0x0, 0xff, 0x8, 0x8}, {0x8, 0x1f, 0x8, 0x200}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x100, 0x81, 0x33, 0x4}, {0xbda, 0x7f, 0x0, 0x7f}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x57}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) 00:42:33 executing program 2: r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VIDIOC_DECODER_CMD(r0, 0x4020940d, &(0x7f0000000640)={0x3, 0x0, @raw_data}) 00:42:33 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r2, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @private}, &(0x7f0000000100)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r5, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x401}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1ff}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4c041}, 0x8000) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x218, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x1fc, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x5cd3, 0x4, 0xa2, 0xffffffff}, {0x100, 0x9, 0x0, 0x3ff}, {0x8, 0x5, 0x0, 0x10001}, {0x3, 0x80, 0x4, 0x3}, {0x5, 0x8, 0x2, 0x10001}, {0x9, 0x4, 0x7e, 0xfffffffb}, {0x0, 0xff, 0x8, 0x8}, {0x8, 0x1f, 0x8, 0x200}]}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x100, 0x81, 0x33, 0x4}, {0xbda, 0x7f, 0x0, 0x7f}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x57}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) 00:42:33 executing program 5: socket$packet(0x11, 0x2, 0x300) 00:42:33 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) socket$inet(0x2, 0xa, 0x2) 00:42:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000100)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)={0x4c4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2441}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1f, 0x93, 0x80000001}, {0x80, 0x10, 0x8, 0x3}, {0x5, 0x20, 0xde}, {0x1, 0x3, 0xff}, {0x33, 0x81, 0x70, 0x7ff}, {0x2, 0xc0, 0x3, 0x2}, {0x1, 0x7, 0x80, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9f56}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7db, 0x63, 0x1, 0x7fff}, {0x4, 0xc7, 0x7, 0x5}, {0x3f, 0x6, 0x0, 0x800}, {0x401, 0x5, 0x59, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4001) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:36 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 00:42:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$smackfs_labels_list(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="405b5b205d2d7c285b2f2513202624da6b0c9a20292f3a20282c200000000000000000"], 0x23) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000080)={0x2, 0x48}, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:36 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$MRT6_PIM(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000000)=0x1, 0x4) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xffffffffffffffff, 0xfffffffffffffff8, 0x1) getsockopt$MRT6(0xffffffffffffffff, 0x29, 0xce, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:36 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) socket$inet(0x2, 0xa, 0x2) 00:42:36 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x40}}, 0x8800) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0x541b, 0x0) 00:42:36 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000100)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)={0x4c4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2441}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1f, 0x93, 0x80000001}, {0x80, 0x10, 0x8, 0x3}, {0x5, 0x20, 0xde}, {0x1, 0x3, 0xff}, {0x33, 0x81, 0x70, 0x7ff}, {0x2, 0xc0, 0x3, 0x2}, {0x1, 0x7, 0x80, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9f56}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7db, 0x63, 0x1, 0x7fff}, {0x4, 0xc7, 0x7, 0x5}, {0x3f, 0x6, 0x0, 0x800}, {0x401, 0x5, 0x59, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4001) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:36 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:10 0', 0x1b) socket$inet(0x2, 0xa, 0x2) 00:42:36 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @private, @initdev}, &(0x7f0000000100)=0xc) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1000}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4000840) 00:42:36 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) write$smackfs_labels_list(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="405b5b205d2d7c285b2f2513202624da6b0c9a20292f3a20282c200000000000000000"], 0x23) (async, rerun: 32) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000080)={0x2, 0x48}, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:36 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000100)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)={0x4c4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2441}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1f, 0x93, 0x80000001}, {0x80, 0x10, 0x8, 0x3}, {0x5, 0x20, 0xde}, {0x1, 0x3, 0xff}, {0x33, 0x81, 0x70, 0x7ff}, {0x2, 0xc0, 0x3, 0x2}, {0x1, 0x7, 0x80, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9f56}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7db, 0x63, 0x1, 0x7fff}, {0x4, 0xc7, 0x7, 0x5}, {0x3f, 0x6, 0x0, 0x800}, {0x401, 0x5, 0x59, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4001) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, 0x0) 00:42:36 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x40}}, 0x8800) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0x541b, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x40}}, 0x8800) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0x541b, 0x0) (async) 00:42:36 executing program 0: socket$packet(0x11, 0x2, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) (async) 00:42:36 executing program 2: socketpair(0xa, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x1405, 0x400, 0x70bd25, 0x25dfdbfb, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c8a0}, 0x4000000) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x0, @private2, 0x1000}, {0xa, 0x4e20, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7}, 0xffffffffffffffff, {[0x8, 0x3, 0x3, 0x9, 0x7, 0x0, 0x20, 0x8]}}, 0x5c) socket$inet(0x2, 0x6, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'vlan0\x00'}}, 0x1e) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x5, "83acd0a173a1b78fb2ff0960ed528ab9fb1a052d54105ca75c1b63c7a61d53cc"}) 00:42:36 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={0x0, @empty}, &(0x7f0000001240)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800d0}, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)=0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000001100)={0x38, 0x2, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x38}) connect$nfc_raw(r4, &(0x7f0000001140)={0x27, r10, 0x1, 0x1}, 0x10) write$6lowpan_control(r8, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 00:42:36 executing program 3: syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x38400) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000100)={0x2, 0x2, @raw_data=[0x5, 0x5, 0x1000, 0x9, 0x0, 0x3802, 0x6, 0x8, 0x80000001, 0xff, 0x7f, 0x1f, 0x5, 0x4, 0x400400, 0xbf1b]}) 00:42:36 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000100)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000140)={0x4c4, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [{{0x8}, {0x1a0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x2441}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x0, 0x1f, 0x93, 0x80000001}, {0x80, 0x10, 0x8, 0x3}, {0x5, 0x20, 0xde}, {0x1, 0x3, 0xff}, {0x33, 0x81, 0x70, 0x7ff}, {0x2, 0xc0, 0x3, 0x2}, {0x1, 0x7, 0x80, 0x2}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9f56}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}]}}, {{0x8}, {0x140, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x7db, 0x63, 0x1, 0x7fff}, {0x4, 0xc7, 0x7, 0x5}, {0x3f, 0x6, 0x0, 0x800}, {0x401, 0x5, 0x59, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfff}}}]}}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x4000004}, 0x4001) 00:42:36 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={0x0, @empty}, &(0x7f0000001240)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800d0}, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)=0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000001100)={0x38, 0x2, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x38}) connect$nfc_raw(r4, &(0x7f0000001140)={0x27, r10, 0x1, 0x1}, 0x10) write$6lowpan_control(r8, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 00:42:36 executing program 3: syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x38400) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000100)={0x2, 0x2, @raw_data=[0x5, 0x5, 0x1000, 0x9, 0x0, 0x3802, 0x6, 0x8, 0x80000001, 0xff, 0x7f, 0x1f, 0x5, 0x4, 0x400400, 0xbf1b]}) 00:42:36 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x40}}, 0x8800) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0x541b, 0x0) 00:42:36 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={0x0, @empty}, &(0x7f0000001240)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800d0}, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)=0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000001100)={0x38, 0x2, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x38}) connect$nfc_raw(r4, &(0x7f0000001140)={0x27, r10, 0x1, 0x1}, 0x10) write$6lowpan_control(r8, &(0x7f0000000180)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) 00:42:38 executing program 5: socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$smackfs_labels_list(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="405b5b205d2d7c285b2f2513202624da6b0c9a20292f3a20282c200000000000000000"], 0x23) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000080)={0x2, 0x48}, 0x2) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:38 executing program 3: syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x38400) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f0000000100)={0x2, 0x2, @raw_data=[0x5, 0x5, 0x1000, 0x9, 0x0, 0x3802, 0x6, 0x8, 0x80000001, 0xff, 0x7f, 0x1f, 0x5, 0x4, 0x400400, 0xbf1b]}) 00:42:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @broadcast}, &(0x7f0000000100)=0xc) 00:42:38 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={0x0, @empty}, &(0x7f0000001240)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800d0}, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)=0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000001100)={0x38, 0x2, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x38}) connect$nfc_raw(r4, &(0x7f0000001140)={0x27, r10, 0x1, 0x1}, 0x10) 00:42:38 executing program 0: socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) 00:42:38 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) socketpair(0x2c, 0x4, 0x8000, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:38 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={0x0, @empty}, &(0x7f0000001240)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800d0}, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000001100)={0x38, 0x2, r3}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000300)={0x38}) 00:42:38 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 1', 0x1b) openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000280)={0x18}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="fe5ed1c5f5fdd7f955ce80000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40080) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000100)={0x8}) 00:42:38 executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) socketpair(0x2c, 0x4, 0x8000, &(0x7f0000000000)) (async) socketpair(0x2c, 0x4, 0x8000, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:38 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={0x0, @empty}, &(0x7f0000001240)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800d0}, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000001100)={0x38, 0x2, r3}) 00:42:38 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 1', 0x1b) openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000280)={0x18}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="fe5ed1c5f5fdd7f955ce80000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40080) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000100)={0x8}) 00:42:38 executing program 4: socket$packet(0x11, 0x2, 0x300) (async) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) socketpair(0x2c, 0x4, 0x8000, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r1 = syz_open_dev$video(&(0x7f0000000080), 0x6d, 0x10000) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x7, @raw_data="c5195def80239344d9264bc8e6b2272110cf34fee8d8961e179981991bb35f15fc4ed676e80adfed6bde03f65fe1eea97e365b6b33d64db06495ef0e77afebcb428d33685b5eee3facf3dc244ed7e68e0c7cfd5e6d06148d008b580f8fb5937181c74c1f2524aaba05de846c97ec6a6bc85010837a65584daf212e7c1ffca5f0e34b38678d81dc138ea840bac6ef7530ffbb1cdae8e07847a0002dcc9ee422324a89eecf1ecd62bd6b42be1194264f87dd5166ec3d28044ca1d2f3c6e43781038e9d1105e7b49a46"}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000000)={0x8001, "929b90c73cf981c4bb8cb657420fe804af686982150c3ae8df6216743ae246e1", 0x20, 0x7, 0x9, 0x1, 0x4}) 00:42:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000340)={0x14, r3, 0x1}, 0x14}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:38 executing program 0: syz_usb_connect$cdc_ncm(0x4, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0xf6, 0xa0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6f2c50ee"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x800, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x20, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x13dfba52ee10a325, 0x0, 0x80, 0xa6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x7a, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x80, 0x3}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x4, 0x5, 0x5, 0xf0f92a1543594d8d, 0x7f}, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f3f00050a1003000400000604000a1003020800030007100222610900071002007b0e5d95c4fd62fa7ab55359307b7da63f000018100a02c300000000f000800fc00000f00000000000ff000000"], 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x436}}]}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:38 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={0x0, @empty}, &(0x7f0000001240)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800d0}, 0x80000) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001040)) 00:42:38 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:10 1', 0x1b) openat$smackfs_onlycap(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000280)={0x18}) (async) ioctl$IOMMU_IOAS_UNMAP$ALL(r1, 0x3b86, &(0x7f0000000280)={0x18}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="fe5ed1c5f5fdd7f955ce80000000000000000000", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40080) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f00000002c0)) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000100)={0x8}) (async) ioctl$IOMMU_DESTROY$hwpt(r2, 0x3b80, &(0x7f0000000100)={0x8}) 00:42:38 executing program 4: socket$packet(0x11, 0x0, 0x300) 00:42:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000080), 0x6d, 0x10000) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x7, @raw_data="c5195def80239344d9264bc8e6b2272110cf34fee8d8961e179981991bb35f15fc4ed676e80adfed6bde03f65fe1eea97e365b6b33d64db06495ef0e77afebcb428d33685b5eee3facf3dc244ed7e68e0c7cfd5e6d06148d008b580f8fb5937181c74c1f2524aaba05de846c97ec6a6bc85010837a65584daf212e7c1ffca5f0e34b38678d81dc138ea840bac6ef7530ffbb1cdae8e07847a0002dcc9ee422324a89eecf1ecd62bd6b42be1194264f87dd5166ec3d28044ca1d2f3c6e43781038e9d1105e7b49a46"}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) (async) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000000)={0x8001, "929b90c73cf981c4bb8cb657420fe804af686982150c3ae8df6216743ae246e1", 0x20, 0x7, 0x9, 0x1, 0x4}) 00:42:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) write$6lowpan_control(r2, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 00:42:38 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r8 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={0x0, @empty}, &(0x7f0000001240)=0xc) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000001340)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffffffe0}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800d0}, 0x80000) 00:42:38 executing program 4: socket$packet(0x11, 0x0, 0x300) 00:42:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) write$6lowpan_control(r2, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 00:42:38 executing program 4: socket$packet(0x11, 0x0, 0x300) 00:42:38 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000080), 0x6d, 0x10000) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x7, @raw_data="c5195def80239344d9264bc8e6b2272110cf34fee8d8961e179981991bb35f15fc4ed676e80adfed6bde03f65fe1eea97e365b6b33d64db06495ef0e77afebcb428d33685b5eee3facf3dc244ed7e68e0c7cfd5e6d06148d008b580f8fb5937181c74c1f2524aaba05de846c97ec6a6bc85010837a65584daf212e7c1ffca5f0e34b38678d81dc138ea840bac6ef7530ffbb1cdae8e07847a0002dcc9ee422324a89eecf1ecd62bd6b42be1194264f87dd5166ec3d28044ca1d2f3c6e43781038e9d1105e7b49a46"}) (async) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) (async) ioctl$VIDIOC_S_MODULATOR(r2, 0x40445637, &(0x7f0000000000)={0x8001, "929b90c73cf981c4bb8cb657420fe804af686982150c3ae8df6216743ae246e1", 0x20, 0x7, 0x9, 0x1, 0x4}) [ 2558.751404][ T6128] Bluetooth: hci5: command 0x0405 tx timeout 00:42:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:38 executing program 0: syz_usb_connect$cdc_ncm(0x4, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0xf6, 0xa0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6f2c50ee"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x800, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x20, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x13dfba52ee10a325, 0x0, 0x80, 0xa6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x7a, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x80, 0x3}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x4, 0x5, 0x5, 0xf0f92a1543594d8d, 0x7f}, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f3f00050a1003000400000604000a1003020800030007100222610900071002007b0e5d95c4fd62fa7ab55359307b7da63f000018100a02c300000000f000800fc00000f00000000000ff000000"], 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x436}}]}) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) 00:42:38 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xd2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x80000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) write$6lowpan_control(r2, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 00:42:38 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 00:42:38 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:38 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) getsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f0000001200)={0x0, @empty}, &(0x7f0000001240)=0xc) 00:42:38 executing program 2: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r1, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r3, 0x0, 0x56de41a8}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r5, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r4, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:38 executing program 4: socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) 00:42:38 executing program 5: socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:38 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x602}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x85}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4014801}, 0x4000090) 00:42:38 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r2, 0x0, 0x56de41a8}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:38 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x602}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x85}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4014801}, 0x4000090) 00:42:39 executing program 0: syz_usb_connect$cdc_ncm(0x4, 0x7a, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x2, 0x1, 0xf6, 0xa0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "6f2c50ee"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x3, 0x800, 0x1}, {0x6, 0x24, 0x1a, 0x0, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0xffff, 0x20, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x13dfba52ee10a325, 0x0, 0x80, 0xa6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x4, 0x7a, 0x3f}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x4, 0x80, 0x3}}}}}}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x4, 0x5, 0x5, 0xf0f92a1543594d8d, 0x7f}, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f3f00050a1003000400000604000a1003020800030007100222610900071002007b0e5d95c4fd62fa7ab55359307b7da63f000018100a02c300000000f000800fc00000f00000000000ff000000"], 0x1, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x436}}]}) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:39 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:39 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r2, 0x0, 0x56de41a8}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000001000), 0x660080, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:39 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) 00:42:39 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:39 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x602}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x85}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4014801}, 0x4000090) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x602}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x85}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4014801}, 0x4000090) 00:42:39 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000001100)={0x38, 0x8, r0, 0x0, 0x72, 0x103f, &(0x7f0000000100)="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", 0x1}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:42:39 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:39 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r2, 0x0, 0x56de41a8}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) ioctl$IOMMU_IOAS_IOVA_RANGES(r3, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0xa, 0x0, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:39 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000001100)={0x38, 0x8, r0, 0x0, 0x72, 0x103f, &(0x7f0000000100)="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", 0x1}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:42:39 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, '\x00', @raw_data=[0x81, 0x7fff, 0x1, 0x1, 0x8, 0x7a800000, 0xfffffc00, 0x56f, 0x98ee, 0x80, 0x7, 0x2, 0x40, 0x3, 0x5, 0x5, 0x9, 0x9, 0x5, 0x10, 0x10001, 0xffffffff, 0x10000, 0x200, 0x1000, 0x7fffffff, 0x81, 0x8, 0x2, 0x1, 0x72a1, 0x8]}) syz_io_uring_setup(0x3741, &(0x7f0000000180)={0x0, 0x54a7, 0x2, 0x2, 0x23e, 0x0, r3}, &(0x7f0000000200), &(0x7f0000000240)) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close$fd_v4l2_buffer(r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4011400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffe}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x11) 00:42:39 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r2, 0x0, 0x56de41a8}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000001080)={{0xa, 0x4e20, 0xbc, @empty, 0x7}, {0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}, 0x3}, 0x1, {[0x1ff, 0x1, 0x1, 0xffffff6e, 0x9, 0x6b3, 0x492cd7fd, 0x7]}}, 0x5c) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:40 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140e, 0x8, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x4018c41) 00:42:40 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:40 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(0xffffffffffffffff, 0x3ba0, &(0x7f0000001100)={0x38, 0x8, r0, 0x0, 0x72, 0x103f, &(0x7f0000000100)="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", 0x1}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:42:40 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r2, 0x0, 0x56de41a8}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r3, 0x8004562e, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:40 executing program 4: r0 = add_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) 00:42:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, '\x00', @raw_data=[0x81, 0x7fff, 0x1, 0x1, 0x8, 0x7a800000, 0xfffffc00, 0x56f, 0x98ee, 0x80, 0x7, 0x2, 0x40, 0x3, 0x5, 0x5, 0x9, 0x9, 0x5, 0x10, 0x10001, 0xffffffff, 0x10000, 0x200, 0x1000, 0x7fffffff, 0x81, 0x8, 0x2, 0x1, 0x72a1, 0x8]}) syz_io_uring_setup(0x3741, &(0x7f0000000180)={0x0, 0x54a7, 0x2, 0x2, 0x23e, 0x0, r3}, &(0x7f0000000200), &(0x7f0000000240)) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close$fd_v4l2_buffer(r4) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4011400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffe}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x11) 00:42:40 executing program 4: r0 = add_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) (async) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) 00:42:40 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:40 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 00:42:40 executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:40 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r2, 0x0, 0x56de41a8}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:40 executing program 4: r0 = add_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$get_persistent(0x16, 0xffffffffffffffff, r0) (async) r1 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0x541b, 0x0) 00:42:40 executing program 0: socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140e, 0x8, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x4018c41) 00:42:40 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r2, 0x0, 0x56de41a8}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x212200, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:40 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:40 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) (async) 00:42:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000380)) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r3, 0xc0905664, &(0x7f0000000280)={0x0, 0x0, '\x00', @raw_data=[0x81, 0x7fff, 0x1, 0x1, 0x8, 0x7a800000, 0xfffffc00, 0x56f, 0x98ee, 0x80, 0x7, 0x2, 0x40, 0x3, 0x5, 0x5, 0x9, 0x9, 0x5, 0x10, 0x10001, 0xffffffff, 0x10000, 0x200, 0x1000, 0x7fffffff, 0x81, 0x8, 0x2, 0x1, 0x72a1, 0x8]}) syz_io_uring_setup(0x3741, &(0x7f0000000180)={0x0, 0x54a7, 0x2, 0x2, 0x23e, 0x0, r3}, &(0x7f0000000200), &(0x7f0000000240)) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) close$fd_v4l2_buffer(r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4011400}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffe}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x11) 00:42:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @empty}, &(0x7f0000000280)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f00000003c0)={0x860, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x270, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xed8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1f, 0x2, 0x9, 0x5}, {0x0, 0x7f, 0x54, 0x7fff}, {0x3, 0xfb}, {0x7, 0x3f, 0x1, 0x5}, {0x7, 0x6, 0xec, 0x1000}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x12, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x60}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4b32}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r9, 0x541b, 0x0) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000080)={0x0, 0x0, 0x2, r10, 0x7fff}, 0xc) 00:42:40 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000380)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f00000003c0)={0x38, 0xa, r2, 0x0, 0x56de41a8}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:40 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 2', 0x1b) 00:42:40 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:40 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async, rerun: 64) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @empty}, &(0x7f0000000280)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f00000003c0)={0x860, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x270, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xed8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1f, 0x2, 0x9, 0x5}, {0x0, 0x7f, 0x54, 0x7fff}, {0x3, 0xfb}, {0x7, 0x3f, 0x1, 0x5}, {0x7, 0x6, 0xec, 0x1000}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x12, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x60}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4b32}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r9, 0x541b, 0x0) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000080)={0x0, 0x0, 0x2, r10, 0x7fff}, 0xc) 00:42:40 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:40 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000380)={0xc}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:40 executing program 0: socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140e, 0x8, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x4018c41) 00:42:40 executing program 1: socket$packet(0x11, 0x2, 0x300) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:40 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:40 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @empty}, &(0x7f0000000280)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'batadv0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c40)={&(0x7f00000003c0)={0x860, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r1}}}]}}, {{0x8}, {0x1bc, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe0}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x4}}, {{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff7}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x270, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xed8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x1f, 0x2, 0x9, 0x5}, {0x0, 0x7f, 0x54, 0x7fff}, {0x3, 0xfb}, {0x7, 0x3f, 0x1, 0x5}, {0x7, 0x6, 0xec, 0x1000}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x12, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x60}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4b32}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffffe}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x860}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r9, 0x541b, 0x0) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000040)=0x14) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000080)={0x0, 0x0, 0x2, r10, 0x7fff}, 0xc) 00:42:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:40 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) futex_waitv(&(0x7f0000000c80)=[{0x1d, &(0x7f0000000400)=0x2}, {0xf9fb, &(0x7f0000000440), 0x2}, {0x9, &(0x7f0000000480)=0x100, 0x82}, {0x4, &(0x7f00000004c0)=0x6, 0x2}, {0x400, &(0x7f0000000500)=0x7, 0x82}, {0x3, &(0x7f0000000540)=0x6, 0x82}, {0x1, &(0x7f0000000580)=0x9, 0x2}, {0x9c, &(0x7f00000005c0)=0x100000001, 0x82}, {0x2, &(0x7f0000000600)=0x8, 0x82}, {0x8, &(0x7f0000000640)=0x5, 0x2}, {0x7ff, &(0x7f0000000680)=0x5, 0x82}, {0x401, &(0x7f00000006c0)=0x4, 0x2}, {0x6, &(0x7f0000000700)=0x7, 0x2}, {0x6ad7, &(0x7f0000000740)=0x3, 0x2}, {0x1d49, &(0x7f0000000780)=0x8, 0x2}, {0x2, &(0x7f00000007c0)=0x19ef, 0x379ef7b66ce5e4a0}, {0x7fff, &(0x7f0000000800)=0xc0, 0x2}, {0x29, &(0x7f0000000840)=0x101, 0x82}, {0x1, &(0x7f0000000880), 0x82}, {0x5, &(0x7f00000008c0)=0xa7d, 0x82}, {0x6, &(0x7f0000000900)=0x7, 0x2}, {0x81, &(0x7f0000000940)=0x1, 0x2}, {0x2, &(0x7f0000000980)=0x6, 0x82}, {0x6, &(0x7f00000009c0)=0x3f, 0x82}, {0x6, &(0x7f0000000a00)=0xfffffffffffffffd, 0x2}, {0x1, &(0x7f0000000a40)=0x7ff, 0x2}, {0x0, &(0x7f0000000a80)=0x6, 0x2}, {0x3, &(0x7f0000000ac0)=0xffffffffffffffff, 0x2}, {0x0, &(0x7f0000000b00)=0x6, 0x2}, {0x4, &(0x7f0000000b40)=0x7, 0x82}, {0x1f, &(0x7f0000000b80)=0x6, 0x2}, {0xffff, &(0x7f0000000bc0)=0xfffffffffffff001, 0x2}, {0x7f, &(0x7f0000000c00)=0x80000000, 0x2}, {0x1, &(0x7f0000000c40)=0x4aa, 0x6}], 0x22, 0x0, &(0x7f0000000fc0)={0x77359400}, 0x1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:40 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:40 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:40 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)={0x39, 0x3, 0x3, 0x1, "09d456666f16700a24ef3d5c69883be20aaa3511e279a2f3f7fa508f4ab4404cf9"}) 00:42:40 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:40 executing program 1: socket$packet(0x11, 0x2, 0x300) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:40 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:40 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)={0x39, 0x3, 0x3, 0x1, "09d456666f16700a24ef3d5c69883be20aaa3511e279a2f3f7fa508f4ab4404cf9"}) 00:42:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) 00:42:40 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:40 executing program 1: socket$packet(0x11, 0x2, 0x300) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @initdev}, &(0x7f0000000080)=0xc) 00:42:40 executing program 5: socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:40 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000000)={0x39, 0x3, 0x3, 0x1, "09d456666f16700a24ef3d5c69883be20aaa3511e279a2f3f7fa508f4ab4404cf9"}) 00:42:40 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) [ 2560.762970][T14018] ================================================================== [ 2560.765188][T14018] BUG: KASAN: slab-use-after-free in hci_send_acl+0x54/0xc48 [ 2560.767102][T14018] Read of size 8 at addr ffff0000ce9fce18 by task kworker/1:4/14018 [ 2560.769183][T14018] [ 2560.769745][T14018] CPU: 1 PID: 14018 Comm: kworker/1:4 Not tainted 6.6.0-rc7-syzkaller-g8de1e7afcc1c #0 [ 2560.772261][T14018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/09/2023 [ 2560.774967][T14018] Workqueue: events l2cap_info_timeout [ 2560.776427][T14018] Call trace: [ 2560.777297][T14018] dump_backtrace+0x1b8/0x1e4 [ 2560.778535][T14018] show_stack+0x2c/0x44 [ 2560.779594][T14018] dump_stack_lvl+0xd0/0x124 [ 2560.780821][T14018] print_report+0x174/0x514 [ 2560.782074][T14018] kasan_report+0xd8/0x138 [ 2560.783255][T14018] __asan_report_load8_noabort+0x20/0x2c [ 2560.784780][T14018] hci_send_acl+0x54/0xc48 [ 2560.785942][T14018] l2cap_send_cmd+0x52c/0x76c [ 2560.787184][T14018] l2cap_send_conn_req+0x188/0x2c4 [ 2560.788586][T14018] l2cap_start_connection+0x118/0x2fc [ 2560.789996][T14018] l2cap_conn_start+0x928/0xd8c [ 2560.791307][T14018] l2cap_info_timeout+0x68/0xb8 [ 2560.792647][T14018] process_one_work+0x694/0x1204 [ 2560.793965][T14018] worker_thread+0x938/0xef4 [ 2560.795211][T14018] kthread+0x288/0x310 [ 2560.796273][T14018] ret_from_fork+0x10/0x20 [ 2560.797455][T14018] [ 2560.798074][T14018] Allocated by task 2086: [ 2560.799260][T14018] kasan_set_track+0x4c/0x7c [ 2560.800441][T14018] kasan_save_alloc_info+0x24/0x30 [ 2560.801741][T14018] __kasan_kmalloc+0xac/0xc4 [ 2560.802974][T14018] kmalloc_trace+0x70/0x88 [ 2560.804095][T14018] hci_chan_create+0xb0/0x2b0 [ 2560.805363][T14018] l2cap_conn_add+0x78/0x998 [ 2560.806591][T14018] l2cap_chan_connect+0x5bc/0xce4 [ 2560.807891][T14018] lowpan_control_write+0x4e8/0x824 [ 2560.809296][T14018] full_proxy_write+0x110/0x1f8 [ 2560.810559][T14018] vfs_write+0x2a0/0x93c [ 2560.811650][T14018] ksys_write+0x15c/0x26c [ 2560.812808][T14018] __arm64_sys_write+0x7c/0x90 [ 2560.814040][T14018] invoke_syscall+0x98/0x2b8 [ 2560.815282][T14018] el0_svc_common+0x130/0x23c [ 2560.816524][T14018] do_el0_svc+0x48/0x58 [ 2560.817610][T14018] el0_svc+0x54/0x158 [ 2560.818655][T14018] el0t_64_sync_handler+0x84/0xfc [ 2560.819985][T14018] el0t_64_sync+0x190/0x194 [ 2560.821198][T14018] [ 2560.821810][T14018] Freed by task 6128: [ 2560.822863][T14018] kasan_set_track+0x4c/0x7c [ 2560.824100][T14018] kasan_save_free_info+0x38/0x5c [ 2560.825464][T14018] ____kasan_slab_free+0x144/0x1c0 [ 2560.826811][T14018] __kasan_slab_free+0x18/0x28 [ 2560.828064][T14018] __kmem_cache_free+0x2ac/0x480 [ 2560.829339][T14018] kfree+0xb8/0x19c [ 2560.830323][T14018] hci_chan_del+0x148/0x1c4 [ 2560.831520][T14018] hci_conn_del+0x3cc/0xabc [ 2560.832719][T14018] hci_conn_failed+0x204/0x2c0 [ 2560.834037][T14018] hci_abort_conn_sync+0x688/0xe38 [ 2560.835365][T14018] abort_conn_sync+0x5c/0x8c [ 2560.836538][T14018] hci_cmd_sync_work+0x1cc/0x34c [ 2560.837830][T14018] process_one_work+0x694/0x1204 [ 2560.839142][T14018] worker_thread+0x938/0xef4 [ 2560.840369][T14018] kthread+0x288/0x310 [ 2560.841499][T14018] ret_from_fork+0x10/0x20 [ 2560.842665][T14018] [ 2560.843277][T14018] Last potentially related work creation: [ 2560.844775][T14018] kasan_save_stack+0x40/0x6c [ 2560.845974][T14018] __kasan_record_aux_stack+0xcc/0xe8 [ 2560.847453][T14018] kasan_record_aux_stack_noalloc+0x14/0x20 [ 2560.849002][T14018] kvfree_call_rcu+0xac/0x674 [ 2560.850252][T14018] kernfs_unlink_open_file+0x398/0x448 [ 2560.851651][T14018] kernfs_fop_release+0x130/0x198 [ 2560.852926][T14018] __fput+0x324/0x7f8 [ 2560.853976][T14018] __fput_sync+0x60/0x9c [ 2560.855083][T14018] __arm64_sys_close+0x150/0x1e0 [ 2560.856433][T14018] invoke_syscall+0x98/0x2b8 [ 2560.857706][T14018] el0_svc_common+0x130/0x23c [ 2560.858958][T14018] do_el0_svc+0x48/0x58 [ 2560.860087][T14018] el0_svc+0x54/0x158 [ 2560.861127][T14018] el0t_64_sync_handler+0x84/0xfc [ 2560.862455][T14018] el0t_64_sync+0x190/0x194 [ 2560.863643][T14018] [ 2560.864231][T14018] Second to last potentially related work creation: [ 2560.865976][T14018] kasan_save_stack+0x40/0x6c [ 2560.867234][T14018] __kasan_record_aux_stack+0xcc/0xe8 [ 2560.868676][T14018] kasan_record_aux_stack_noalloc+0x14/0x20 [ 2560.870267][T14018] kvfree_call_rcu+0xac/0x674 [ 2560.871506][T14018] dev_addr_flush+0x13c/0x1d4 [ 2560.872787][T14018] free_netdev+0x1a8/0x41c [ 2560.873976][T14018] usbnet_probe+0x15e0/0x1ffc [ 2560.875183][T14018] usb_probe_interface+0x500/0x984 [ 2560.876538][T14018] really_probe+0x394/0xa7c [ 2560.877732][T14018] __driver_probe_device+0x194/0x3b4 [ 2560.879102][T14018] driver_probe_device+0x78/0x330 [ 2560.880391][T14018] __device_attach_driver+0x2a8/0x4f4 [ 2560.881884][T14018] bus_for_each_drv+0x228/0x2bc [ 2560.883191][T14018] __device_attach+0x2b4/0x434 [ 2560.884439][T14018] device_initial_probe+0x24/0x34 [ 2560.885777][T14018] bus_probe_device+0x178/0x240 [ 2560.887091][T14018] device_add+0x768/0xaac [ 2560.888285][T14018] usb_set_configuration+0x15cc/0x1b38 [ 2560.889739][T14018] usb_generic_driver_probe+0x8c/0x148 [ 2560.891172][T14018] usb_probe_device+0x120/0x25c [ 2560.892453][T14018] really_probe+0x394/0xa7c [ 2560.893689][T14018] __driver_probe_device+0x194/0x3b4 [ 2560.895130][T14018] driver_probe_device+0x78/0x330 [ 2560.896407][T14018] __device_attach_driver+0x2a8/0x4f4 [ 2560.897811][T14018] bus_for_each_drv+0x228/0x2bc [ 2560.899101][T14018] __device_attach+0x2b4/0x434 [ 2560.900384][T14018] device_initial_probe+0x24/0x34 [ 2560.901738][T14018] bus_probe_device+0x178/0x240 [ 2560.903004][T14018] device_add+0x768/0xaac [ 2560.904163][T14018] usb_new_device+0x904/0x142c [ 2560.905455][T14018] hub_event+0x2468/0x433c [ 2560.906602][T14018] process_one_work+0x694/0x1204 [ 2560.907924][T14018] worker_thread+0x938/0xef4 [ 2560.909139][T14018] kthread+0x288/0x310 [ 2560.910234][T14018] ret_from_fork+0x10/0x20 00:42:40 executing program 3: openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/177, 0x110, 0xb1, 0x1, 0x100}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x1410, 0x300, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x30}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x20, &(0x7f0000000040)={&(0x7f0000000300)=""/250, 0xfa, 0x0, &(0x7f0000000400)=""/142, 0x8e}}, 0x10) 00:42:40 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000001180), 0x400c0, 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:40 executing program 3: openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/177, 0x110, 0xb1, 0x1, 0x100}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x1410, 0x300, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x30}}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x20, &(0x7f0000000040)={&(0x7f0000000300)=""/250, 0xfa, 0x0, &(0x7f0000000400)=""/142, 0x8e}}, 0x10) 00:42:40 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) [ 2560.911390][T14018] [ 2560.912004][T14018] The buggy address belongs to the object at ffff0000ce9fce00 [ 2560.912004][T14018] which belongs to the cache kmalloc-128 of size 128 [ 2560.915748][T14018] The buggy address is located 24 bytes inside of [ 2560.915748][T14018] freed 128-byte region [ffff0000ce9fce00, ffff0000ce9fce80) [ 2560.919395][T14018] [ 2560.919992][T14018] The buggy address belongs to the physical page: [ 2560.921718][T14018] page:00000000fdf5d39d refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff0000ce9fc800 pfn:0x10e9fc [ 2560.924836][T14018] ksm flags: 0x5ffc00000000800(slab|node=0|zone=2|lastcpupid=0x7ff) [ 2560.926923][T14018] page_type: 0xffffffff() [ 2560.928056][T14018] raw: 05ffc00000000800 ffff0000c00018c0 fffffc000337c740 dead000000000003 [ 2560.930355][T14018] raw: ffff0000ce9fc800 000000008010000c 00000001ffffffff 0000000000000000 [ 2560.932665][T14018] page dumped because: kasan: bad access detected [ 2560.934409][T14018] [ 2560.934988][T14018] Memory state around the buggy address: [ 2560.936485][T14018] ffff0000ce9fcd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 2560.938620][T14018] ffff0000ce9fcd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2560.940766][T14018] >ffff0000ce9fce00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2560.942907][T14018] ^ [ 2560.944216][T14018] ffff0000ce9fce80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2560.946385][T14018] ffff0000ce9fcf00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2560.948582][T14018] ================================================================== [ 2560.953507][T14018] Disabling lock debugging due to kernel taint 00:42:40 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:40 executing program 3: openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)=""/177, 0x110, 0xb1, 0x1, 0x100}, 0x20) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x1410, 0x300, 0x70bd28, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x4}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x30}}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={r1, 0x20, &(0x7f0000000040)={&(0x7f0000000300)=""/250, 0xfa, 0x0, &(0x7f0000000400)=""/142, 0x8e}}, 0x10) 00:42:40 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:40 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, &(0x7f0000000080)) 00:42:40 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) 00:42:40 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x9, @pix_mp={0x401, 0x3, 0x38415261, 0x7, 0x0, [{0x8, 0x30000000}, {0x9, 0x4}, {0x6, 0x9}, {0x1, 0xd3}, {0x1007, 0xfffffff7}, {0x2, 0x10000}, {0x8000, 0x7}, {0x81, 0x40}], 0x84, 0x80, 0x3, 0x1, 0x1}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000340)={0x2, {0x7, 0x6, 0x8, 0x40000000}}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x7, @sliced={0x7, [0xe6, 0x6, 0x4, 0x4, 0xf616, 0x2, 0x2478, 0x4800, 0x6, 0x0, 0x1f, 0xd95, 0x400, 0x20, 0x3, 0x6b83, 0x7fff, 0x2, 0x1000, 0xbc, 0xcae0, 0x0, 0x2, 0x3, 0xfff, 0x800, 0x7ff, 0x401, 0x333b, 0x1, 0xadd4, 0x3ff, 0x1, 0x9, 0x3ff, 0x1ff, 0xe, 0x81, 0x3, 0x1f, 0x101, 0x5580, 0x4, 0x6, 0x225e, 0x8, 0x5, 0x5], 0xffffffc0}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x3, @vbi={0xfffffff9, 0x0, 0x7ee6, 0xb5315241, [0x8, 0x1], [0xe76, 0xffffffff], 0x1}}) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) (async) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) (async, rerun: 32) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) (rerun: 32) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x9, @pix_mp={0x401, 0x3, 0x38415261, 0x7, 0x0, [{0x8, 0x30000000}, {0x9, 0x4}, {0x6, 0x9}, {0x1, 0xd3}, {0x1007, 0xfffffff7}, {0x2, 0x10000}, {0x8000, 0x7}, {0x81, 0x40}], 0x84, 0x80, 0x3, 0x1, 0x1}}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) (async) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000340)={0x2, {0x7, 0x6, 0x8, 0x40000000}}) (async) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x7, @sliced={0x7, [0xe6, 0x6, 0x4, 0x4, 0xf616, 0x2, 0x2478, 0x4800, 0x6, 0x0, 0x1f, 0xd95, 0x400, 0x20, 0x3, 0x6b83, 0x7fff, 0x2, 0x1000, 0xbc, 0xcae0, 0x0, 0x2, 0x3, 0xfff, 0x800, 0x7ff, 0x401, 0x333b, 0x1, 0xadd4, 0x3ff, 0x1, 0x9, 0x3ff, 0x1ff, 0xe, 0x81, 0x3, 0x1f, 0x101, 0x5580, 0x4, 0x6, 0x225e, 0x8, 0x5, 0x5], 0xffffffc0}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) (async) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) (async) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x3, @vbi={0xfffffff9, 0x0, 0x7ee6, 0xb5315241, [0x8, 0x1], [0xe76, 0xffffffff], 0x1}}) 00:42:41 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:42:41 executing program 0: socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='connect aa:aa:aa:aa:aa:11 0', 0x1b) 00:42:41 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0xa2501, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfff}]}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfff9}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x1ffe4}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4a041}, 0x845) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:42:41 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x3, 0x5, 0x4, 0x1005, 0x3ace, {}, {0x4, 0xc, 0x1, 0x0, 0x0, 0x3, "2f8c05c8"}, 0x3, 0x4, {}, 0xffff}) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x9, "c8349ae34906ed1888313a57f3a1f537590d2cb865889015d420d5106be96362", 0x40, 0x4c581277, 0x5141, 0x8, 0x2}) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x9, @pix_mp={0x401, 0x3, 0x38415261, 0x7, 0x0, [{0x8, 0x30000000}, {0x9, 0x4}, {0x6, 0x9}, {0x1, 0xd3}, {0x1007, 0xfffffff7}, {0x2, 0x10000}, {0x8000, 0x7}, {0x81, 0x40}], 0x84, 0x80, 0x3, 0x1, 0x1}}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) (async) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, 0x0) (async) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f0000000340)={0x2, {0x7, 0x6, 0x8, 0x40000000}}) (async) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x7, @sliced={0x7, [0xe6, 0x6, 0x4, 0x4, 0xf616, 0x2, 0x2478, 0x4800, 0x6, 0x0, 0x1f, 0xd95, 0x400, 0x20, 0x3, 0x6b83, 0x7fff, 0x2, 0x1000, 0xbc, 0xcae0, 0x0, 0x2, 0x3, 0xfff, 0x800, 0x7ff, 0x401, 0x333b, 0x1, 0xadd4, 0x3ff, 0x1, 0x9, 0x3ff, 0x1ff, 0xe, 0x81, 0x3, 0x1f, 0x101, 0x5580, 0x4, 0x6, 0x225e, 0x8, 0x5, 0x5], 0xffffffc0}}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)) (async) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000240)={0x3, @vbi={0xfffffff9, 0x0, 0x7ee6, 0xb5315241, [0x8, 0x1], [0xe76, 0xffffffff], 0x1}}) 00:42:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0xa2501, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfff}]}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfff9}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x1ffe4}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4a041}, 0x845) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) write$6lowpan_control(r2, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 00:42:41 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 0', 0x1b) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0xa2501, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfff}]}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfff9}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x1ffe4}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4a041}, 0x845) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 0', 0x1b) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0xa2501, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe0, 0x0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVICE={0x2c, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfff}]}, @NL802154_ATTR_SEC_DEVICE={0x54, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0xfff9}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0x1ffe4}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2c, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4a041}, 0x845) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async) write$6lowpan_control(r2, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) (async) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000300)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}]}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0xc, {0x6, 0x1ff, 0x200}}) 00:42:41 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x3, 0x5, 0x4, 0x1005, 0x3ace, {}, {0x4, 0xc, 0x1, 0x0, 0x0, 0x3, "2f8c05c8"}, 0x3, 0x4, {}, 0xffff}) (async) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x9, "c8349ae34906ed1888313a57f3a1f537590d2cb865889015d420d5106be96362", 0x40, 0x4c581277, 0x5141, 0x8, 0x2}) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000300)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}]}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000300)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}]}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0xc, {0x6, 0x1ff, 0x200}}) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000300)={0x0, 0x1, 0x0, &(0x7f0000000000)=[{}], 0x0, 0x0, &(0x7f0000000100), 0x7, 0x0, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000240)=[{}, {}, {}, {}]}) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x8, 0x4, 0x4, 0x100000, 0xffffffff, {r2, r3/1000+60000}, {0x1, 0x8, 0x9, 0x6c, 0x1, 0x9, "430a3ec3"}, 0x0, 0x4, {}, 0x8000, 0x0, r0}) r4 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000280)) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000080), 0xa17ed3ee086fb779, 0x164) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x82}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c840}, 0x48000) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000380)={0x0, @reserved}) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f00000000c0)={0x2, 0x4, @raw_data=[0x80000001, 0x0, 0x8001, 0x100, 0xfffffff7, 0x1ff, 0x985, 0x81, 0x6, 0xff, 0xffffff6f, 0x0, 0x8000, 0xffffffff, 0x9, 0x5]}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000002c0)={0x0, 0x9, 0x4, 0x2, 0x0, {r4, r5/1000+60000}, {0x1, 0x2, 0x7f, 0x7, 0x0, 0x1, "24b184f8"}, 0x9, 0x4, {}, 0x5, 0x0, r6}) 00:42:41 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x8, 0x4, 0x4, 0x100000, 0xffffffff, {r2, r3/1000+60000}, {0x1, 0x8, 0x9, 0x6c, 0x1, 0x9, "430a3ec3"}, 0x0, 0x4, {}, 0x8000, 0x0, r0}) syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) (async) r4 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000280)) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000280)) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) 00:42:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0xc, {0x6, 0x1ff, 0x200}}) 00:42:41 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000000)={0x3, 0x5, 0x4, 0x1005, 0x3ace, {}, {0x4, 0xc, 0x1, 0x0, 0x0, 0x3, "2f8c05c8"}, 0x3, 0x4, {}, 0xffff}) (async) r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x9, "c8349ae34906ed1888313a57f3a1f537590d2cb865889015d420d5106be96362", 0x40, 0x4c581277, 0x5141, 0x8, 0x2}) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x8, 0x4, 0x4, 0x100000, 0xffffffff, {r2, r3/1000+60000}, {0x1, 0x8, 0x9, 0x6c, 0x1, 0x9, "430a3ec3"}, 0x0, 0x4, {}, 0x8000, 0x0, r0}) r4 = syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000280)) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) getsockopt$MRT6(r0, 0x29, 0xd0, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) ioctl$VIDIOC_G_OUTPUT(r0, 0x8004562e, 0x0) (async) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) clock_gettime(0x0, &(0x7f0000000100)) (async) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000140)={0x8, 0x4, 0x4, 0x100000, 0xffffffff, {r2, r3/1000+60000}, {0x1, 0x8, 0x9, 0x6c, 0x1, 0x9, "430a3ec3"}, 0x0, 0x4, {}, 0x8000, 0x0, r0}) (async) syz_open_dev$swradio(&(0x7f0000000240), 0x1, 0x2) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, &(0x7f0000000280)) (async) write$6lowpan_control(r1, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 2', 0x1e) (async) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa0982404}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x40000) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8040) 00:42:41 executing program 4: socket$packet(0x11, 0x2, 0x300) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000080), 0xa17ed3ee086fb779, 0x164) (async) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000080), 0xa17ed3ee086fb779, 0x164) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x82}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c840}, 0x48000) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000380)={0x0, @reserved}) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f00000000c0)={0x2, 0x4, @raw_data=[0x80000001, 0x0, 0x8001, 0x100, 0xfffffff7, 0x1ff, 0x985, 0x81, 0x6, 0xff, 0xffffff6f, 0x0, 0x8000, 0xffffffff, 0x9, 0x5]}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000002c0)={0x0, 0x9, 0x4, 0x2, 0x0, {r4, r5/1000+60000}, {0x1, 0x2, 0x7f, 0x7, 0x0, 0x1, "24b184f8"}, 0x9, 0x4, {}, 0x5, 0x0, r6}) 00:42:41 executing program 1: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 1: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 1: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa0982404}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x40000) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8040) socket$packet(0x11, 0x2, 0x300) (async) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa0982404}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x40000) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) (async) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) (async) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8040) (async) 00:42:41 executing program 0: socket$packet(0x11, 0x1, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:41 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) 00:42:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) (async) openat$damon_init_regions(0xffffffffffffff9c, &(0x7f0000000080), 0xa17ed3ee086fb779, 0x164) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x82}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c840}, 0x48000) (async) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r2, 0x80845663, 0x0) (async, rerun: 32) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (rerun: 32) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000380)={0x0, @reserved}) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f00000000c0)={0x2, 0x4, @raw_data=[0x80000001, 0x0, 0x8001, 0x100, 0xfffffff7, 0x1ff, 0x985, 0x81, 0x6, 0xff, 0xffffff6f, 0x0, 0x8000, 0xffffffff, 0x9, 0x5]}) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r1, 0xc0585609, &(0x7f00000002c0)={0x0, 0x9, 0x4, 0x2, 0x0, {r4, r5/1000+60000}, {0x1, 0x2, 0x7f, 0x7, 0x0, 0x1, "24b184f8"}, 0x9, 0x4, {}, 0x5, 0x0, r6}) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(0xffffffffffffffff, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)) 00:42:41 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r3, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa0982404}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfb}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x40000) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, 0x0) (async) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000000)={0x0, @reserved}) (async) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8040) 00:42:41 executing program 0: socket$packet(0x11, 0x1, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:41 executing program 3: openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 00:42:41 executing program 1: socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000e529b866fe1463878d39ab16ea8795e76c1a6558f5e64930db44cee139fe9a097de6fed46232d8b46c36abed4c5854689d4b6c1dfcad43999b5fb5", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf25542bf7060c00060001000000010000000c00060002000000000000000c00060003000000030000000c000600030000000300000097a5e8c1502a1d3962692d70e8fa6a248d8f48db33bf51f9f2c1d4"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x5070, 0x3, @dev={0xfe, 0x80, '\x00', 0x30}, 0xe8}, {0xa, 0x4e21, 0x10001, @mcast2, 0x8000}, 0x0, {[0x253, 0x3, 0x5, 0xc90d, 0x8, 0x8, 0x1, 0x3]}}, 0x5c) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 1: socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:41 executing program 0: socket$packet(0x11, 0x1, 0x300) socket$packet(0x11, 0x2, 0x300) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x6) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000e529b866fe1463878d39ab16ea8795e76c1a6558f5e64930db44cee139fe9a097de6fed46232d8b46c36abed4c5854689d4b6c1dfcad43999b5fb5", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf25542bf7060c00060001000000010000000c00060002000000000000000c00060003000000030000000c000600030000000300000097a5e8c1502a1d3962692d70e8fa6a248d8f48db33bf51f9f2c1d4"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) (async) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x5070, 0x3, @dev={0xfe, 0x80, '\x00', 0x30}, 0xe8}, {0xa, 0x4e21, 0x10001, @mcast2, 0x8000}, 0x0, {[0x253, 0x3, 0x5, 0xc90d, 0x8, 0x8, 0x1, 0x3]}}, 0x5c) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 1', 0x1b) (async) write$6lowpan_control(r0, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 3: ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f00000000c0)={0x6, "81f0c97de8a878810ee159bd0c690704a50badbdcb18ecd8d226598a8bef22e1", 0x4, 0x2, 0xfee, 0x1, 0x1}) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x6) (async) 00:42:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="44000000e529b866fe1463878d39ab16ea8795e76c1a6558f5e64930db44cee139fe9a097de6fed46232d8b46c36abed4c5854689d4b6c1dfcad43999b5fb5", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf25542bf7060c00060001000000010000000c00060002000000000000000c00060003000000030000000c000600030000000300000097a5e8c1502a1d3962692d70e8fa6a248d8f48db33bf51f9f2c1d4"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$MRT6_DONE(r2, 0x29, 0xc9, 0x0, 0x0) (async) setsockopt$MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000000)={{0xa, 0x5070, 0x3, @dev={0xfe, 0x80, '\x00', 0x30}, 0xe8}, {0xa, 0x4e21, 0x10001, @mcast2, 0x8000}, 0x0, {[0x253, 0x3, 0x5, 0xc90d, 0x8, 0x8, 0x1, 0x3]}}, 0x5c) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 1: socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x541b, 0x0) 00:42:41 executing program 3: ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f00000000c0)={0x6, "81f0c97de8a878810ee159bd0c690704a50badbdcb18ecd8d226598a8bef22e1", 0x4, 0x2, 0xfee, 0x1, 0x1}) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f00000000c0)={0x6, "81f0c97de8a878810ee159bd0c690704a50badbdcb18ecd8d226598a8bef22e1", 0x4, 0x2, 0xfee, 0x1, 0x1}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 1', 0x1b) (async) 00:42:41 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x300, 0x70bd25, 0x25dfdbf8, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffc00}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x110b829b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000200)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @remote}, &(0x7f0000000280)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @dev, @initdev}, &(0x7f0000000300)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x20c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x124, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x20, 0xff, 0x9, 0xffff714b}, {0x70, 0x0, 0x7f, 0x2}, {0x2b3, 0x1, 0x7, 0x7fffffff}, {0x9102, 0x1, 0xac, 0x20}, {0x5, 0x40, 0x80, 0x1}, {0x6, 0x0, 0x80, 0x9}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 4: ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8}) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000100)={0xfffffffffffffd26, 0x3, 0xffffffffffffffff, 0x0, 0x6, 0x72, &(0x7f0000000080)="0a7544f93ae1b1bdf38e98212f1c0a3ed9218155c577920934d674892f2dc1345bdcfaa088ebac16df168040d278f34da2e55b94cedd33ba0449a40de34518ee4abc66af5f43094d0780ac8b5ac858d904722c5268ed76ac810912a2d79053c65b233d238f5c24a593dd43c01f92e7bdbbca"}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 3: ioctl$VIDIOC_S_MODULATOR(0xffffffffffffffff, 0x40445637, &(0x7f00000000c0)={0x6, "81f0c97de8a878810ee159bd0c690704a50badbdcb18ecd8d226598a8bef22e1", 0x4, 0x2, 0xfee, 0x1, 0x1}) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='connect aa:aa:aa:aa:aa:11 1', 0x1b) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x201c0, 0x0) 00:42:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x6) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x201c0, 0x0) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x6) socket$packet(0x11, 0x3, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x6) (async) 00:42:41 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) io_uring_setup(0x40ad, &(0x7f00000001c0)={0x0, 0xff40, 0xc60, 0x0, 0x0, 0x0, r0}) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) write$6lowpan_control(r2, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000100)=0x1000) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) 00:42:41 executing program 4: ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8}) (async) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000100)={0xfffffffffffffd26, 0x3, 0xffffffffffffffff, 0x0, 0x6, 0x72, &(0x7f0000000080)="0a7544f93ae1b1bdf38e98212f1c0a3ed9218155c577920934d674892f2dc1345bdcfaa088ebac16df168040d278f34da2e55b94cedd33ba0449a40de34518ee4abc66af5f43094d0780ac8b5ac858d904722c5268ed76ac810912a2d79053c65b233d238f5c24a593dd43c01f92e7bdbbca"}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x201c0, 0x0) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x201c0, 0x0) 00:42:41 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) io_uring_setup(0x40ad, &(0x7f00000001c0)={0x0, 0xff40, 0xc60, 0x0, 0x0, 0x0, r0}) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) write$6lowpan_control(r2, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000100)=0x1000) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) (async) io_uring_setup(0x40ad, &(0x7f00000001c0)={0x0, 0xff40, 0xc60, 0x0, 0x0, 0x0, r0}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) (async) write$6lowpan_control(r2, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) (async) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000100)=0x1000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) (async) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x6) 00:42:41 executing program 0: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) (async) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x300, 0x70bd25, 0x25dfdbf8, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffc00}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x110b829b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000200)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @remote}, &(0x7f0000000280)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @dev, @initdev}, &(0x7f0000000300)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x20c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x124, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x20, 0xff, 0x9, 0xffff714b}, {0x70, 0x0, 0x7f, 0x2}, {0x2b3, 0x1, 0x7, 0x7fffffff}, {0x9102, 0x1, 0xac, 0x20}, {0x5, 0x40, 0x80, 0x1}, {0x6, 0x0, 0x80, 0x9}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) 00:42:41 executing program 4: ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f0000000040)={0x8}) r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r1, 0x3ba0, &(0x7f0000000100)={0xfffffffffffffd26, 0x3, 0xffffffffffffffff, 0x0, 0x6, 0x72, &(0x7f0000000080)="0a7544f93ae1b1bdf38e98212f1c0a3ed9218155c577920934d674892f2dc1345bdcfaa088ebac16df168040d278f34da2e55b94cedd33ba0449a40de34518ee4abc66af5f43094d0780ac8b5ac858d904722c5268ed76ac810912a2d79053c65b233d238f5c24a593dd43c01f92e7bdbbca"}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:41 executing program 3: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) write$6lowpan_control(r0, &(0x7f0000000000)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) io_uring_setup(0x40ad, &(0x7f00000001c0)={0x0, 0xff40, 0xc60, 0x0, 0x0, 0x0, r0}) (async, rerun: 64) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (rerun: 64) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) (async) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r3, 0x3b72, 0x0) (async) write$6lowpan_control(r2, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, 0x0) (async, rerun: 64) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000100)=0x1000) (async, rerun: 64) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000200)={0x1000, 0x3, 0x9, 0x1000, 0x47, 0x5, 0x2}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x2, 0x0, &(0x7f0000000140)=[{}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x5, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000240)=[{}, {}, {}]}) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_OVERLAY(0xffffffffffffffff, 0x4004560e, &(0x7f0000000000)=0x6) 00:42:41 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) 00:42:41 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000200)={0x1000, 0x3, 0x9, 0x1000, 0x47, 0x5, 0x2}) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x2, 0x0, &(0x7f0000000140)=[{}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x5, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000240)=[{}, {}, {}]}) 00:42:41 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:41 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) 00:42:41 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:41 executing program 0: socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r0, 0x300, 0x70bd25, 0x25dfdbf8, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xfffffc00}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x110b829b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040880}, 0x0) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast2, @broadcast}, &(0x7f0000000200)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @remote}, &(0x7f0000000280)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @dev, @initdev}, &(0x7f0000000300)=0xc) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000340)={0x20c, 0x0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r3}, {0x124, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x20, 0xff, 0x9, 0xffff714b}, {0x70, 0x0, 0x7f, 0x2}, {0x2b3, 0x1, 0x7, 0x7fffffff}, {0x9102, 0x1, 0xac, 0x20}, {0x5, 0x40, 0x80, 0x1}, {0x6, 0x0, 0x80, 0x9}]}}}]}}, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000000) 00:42:41 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) 00:42:42 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:42 executing program 1: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x5411, 0x0) 00:42:42 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x541b, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000100)={0x0, @reserved}) 00:42:42 executing program 5: socket$packet(0x11, 0x3, 0x300) (async) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000200)={0x1000, 0x3, 0x9, 0x1000, 0x47, 0x5, 0x2}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x2, 0x0, &(0x7f0000000140)=[{}, {}], 0x0, 0x0, &(0x7f00000002c0), 0x5, 0x0, &(0x7f0000000000)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000240)=[{}, {}, {}]}) 00:42:42 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:42 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:42 executing program 1: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x5411, 0x0) 00:42:42 executing program 1: ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x5411, 0x0) 00:42:42 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:42 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) write$6lowpan_control(r5, &(0x7f00000008c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @broadcast}, &(0x7f0000000280)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @private, @empty}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) r13 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r13, 0x80845663, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000001180)=ANY=[@ANYBLOB="28060000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="8002028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004006700020929bf000050ff05010000000001000195000000000300007f40000000ff0302e600000000bac400030900000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r2, @ANYBLOB="3800010024000100616374697665706f727400000000000000000003000000000000000000000000050002050000000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004009f9e232f08000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000080000000000000000000000040000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=r4, @ANYBLOB="fc00028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000180000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=r9, @ANYRESOCT=r13, @ANYRES32=0x0, @ANYBLOB="6001028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYBLOB="d0bd196018f637a23555abe6f4a2d53a0695246d3f4747426d9a6ce6c3984dc5d7", @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r12, @ANYRES32=0x0], 0x628}, 0x1, 0x0, 0x0, 0x8011}, 0x40802) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) syz_usb_connect$cdc_ncm(0x5, 0x95, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0xae, 0xb0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ad162681370d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x70, 0x1, 0x6, 0x81}, {0x6, 0x24, 0x1a, 0x3f, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x6}, @country_functional={0x10, 0x24, 0x7, 0x40, 0x0, [0xd5cc, 0x6, 0x200, 0x761, 0x9]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x40}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x30, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xe6, 0x1, 0x3f}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x1, 0x2, 0x2, 0xff, 0xef}, 0xf, &(0x7f0000000580)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x80, 0xcbae}]}, 0x6, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x415}}, {0x100, &(0x7f0000000640)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x400a}}]}) 00:42:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1ff}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x17, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8094}, 0x8000) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0x541b, 0x0) 00:42:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x800) 00:42:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:42 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:42 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) [ 2562.304759][ T9824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy 00:42:42 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) [ 2562.308683][ T9824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:42:42 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:42 executing program 2: openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) (async) 00:42:42 executing program 1: socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x5411, 0x0) 00:42:42 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:42 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) (async, rerun: 64) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) (async) write$6lowpan_control(r5, &(0x7f00000008c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @broadcast}, &(0x7f0000000280)=0xc) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @private, @empty}, &(0x7f0000000300)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) r13 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r13, 0x80845663, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000001180)=ANY=[@ANYBLOB="28060000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="8002028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004006700020929bf000050ff05010000000001000195000000000300007f40000000ff0302e600000000bac400030900000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r2, @ANYBLOB="3800010024000100616374697665706f727400000000000000000003000000000000000000000000050002050000000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004009f9e232f08000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000080000000000000000000000040000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=r4, @ANYBLOB="fc00028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000180000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=r9, @ANYRESOCT=r13, @ANYRES32=0x0, @ANYBLOB="6001028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYBLOB="d0bd196018f637a23555abe6f4a2d53a0695246d3f4747426d9a6ce6c3984dc5d7", @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r12, @ANYRES32=0x0], 0x628}, 0x1, 0x0, 0x0, 0x8011}, 0x40802) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) (async) syz_usb_connect$cdc_ncm(0x5, 0x95, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0xae, 0xb0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ad162681370d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x70, 0x1, 0x6, 0x81}, {0x6, 0x24, 0x1a, 0x3f, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x6}, @country_functional={0x10, 0x24, 0x7, 0x40, 0x0, [0xd5cc, 0x6, 0x200, 0x761, 0x9]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x40}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x30, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xe6, 0x1, 0x3f}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x1, 0x2, 0x2, 0xff, 0xef}, 0xf, &(0x7f0000000580)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x80, 0xcbae}]}, 0x6, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x415}}, {0x100, &(0x7f0000000640)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x400a}}]}) 00:42:42 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:42 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1ff}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x17, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4) (async) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8094}, 0x8000) (async) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0x541b, 0x0) 00:42:42 executing program 1: socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x5411, 0x0) 00:42:42 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x800) 00:42:42 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:42 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:42 executing program 2: openat$pfkey(0xffffffffffffff9c, 0x0, 0x800, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:42 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 00:42:42 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:42:42 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:42:42 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x7fffffff, 0x2, 0x9c}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:43 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:42:43 executing program 3: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r5, 0x8004562e, 0x0) (async) write$6lowpan_control(r5, &(0x7f00000008c0)='connect aa:aa:aa:aa:aa:10 1', 0x1b) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @broadcast}, &(0x7f0000000280)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @private, @empty}, &(0x7f0000000300)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) (async) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000880), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000440)=0x14) (async) r13 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000a80), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r13, 0x80845663, 0x0) (async) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000001180)=ANY=[@ANYBLOB="28060000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="500002804c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=0x0, @ANYBLOB="8002028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="64000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000340004006700020929bf000050ff05010000000001000195000000000300007f40000000ff0302e600000000bac400030900000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000600000008000600", @ANYRES32=r2, @ANYBLOB="3800010024000100616374697665706f727400000000000000000003000000000000000000000000050002050000000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004009f9e232f08000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000080000000000000000000000040000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000400000008000100", @ANYRES32=r4, @ANYBLOB="fc00028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000400000008000600", @ANYRES32=r6, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r8, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="7c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000180000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=r9, @ANYRESOCT=r13, @ANYRES32=0x0, @ANYBLOB="6001028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r10, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000200000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYBLOB="d0bd196018f637a23555abe6f4a2d53a0695246d3f4747426d9a6ce6c3984dc5d7", @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=r12, @ANYRES32=0x0], 0x628}, 0x1, 0x0, 0x0, 0x8011}, 0x40802) (async) write$6lowpan_control(r0, &(0x7f00000000c0)='disconnect aa:aa:aa:aa:aa:11 0', 0x1000000000000) syz_usb_connect$cdc_ncm(0x5, 0x95, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0xae, 0xb0, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "ad162681370d"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x70, 0x1, 0x6, 0x81}, {0x6, 0x24, 0x1a, 0x3f, 0x24}, [@dmm={0x7, 0x24, 0x14, 0x2, 0x6}, @country_functional={0x10, 0x24, 0x7, 0x40, 0x0, [0xd5cc, 0x6, 0x200, 0x761, 0x9]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x40}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x1, 0x30, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x5, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0xe6, 0x1, 0x3f}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x1, 0x2, 0x2, 0xff, 0xef}, 0xf, &(0x7f0000000580)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x5, 0x80, 0xcbae}]}, 0x6, [{0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x415}}, {0x100, &(0x7f0000000640)=@string={0x100, 0x3, "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"}}, {0x4, &(0x7f0000000740)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x400a}}]}) 00:42:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x7fffffff, 0x2, 0x9c}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:43 executing program 4: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1ff}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x17, 0x0, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0x0, 0x6, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4008000) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r4, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8094}, 0x8000) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r2, 0x541b, 0x0) 00:42:43 executing program 1: socket$packet(0x11, 0x3, 0x300) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0x5411, 0x0) 00:42:43 executing program 0: r0 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="29032dbd7000fddbdf2507000000050030000000000005002a0000000000050037000000000005002a000100000005"], 0x3c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040800}, 0x800) 00:42:43 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) [ 2563.392455][ T9893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2563.395031][ T9893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 00:42:43 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:42:43 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, 0x0) (async) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000040)={&(0x7f0000ffc000/0x2000)=nil, 0x7fffffff, 0x2, 0x9c}) (async) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0x5411, 0x0) 00:42:43 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) 00:42:43 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) 00:42:43 executing program 1: r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stat